General

  • Target

    d9c87a18a49d0c939b25eaf0e786c18cffa97afdc8b9fe8adaabd8e49cf71a23.exe

  • Size

    316KB

  • MD5

    4508458c3f4067980985d1e373976a57

  • SHA1

    458cd311130c9c36fc8b53862f902babbd655400

  • SHA256

    d9c87a18a49d0c939b25eaf0e786c18cffa97afdc8b9fe8adaabd8e49cf71a23

  • SHA512

    d1d193b0d67960668a6bdc78c511fcad470b3862b56c1f506dcfc22599fbc7caf4f6e8cfea61a4d0836e83dbb8feeece6c318548b962833555fe083db7414adb

  • SSDEEP

    6144:1/P9bEUI1OGJQNVmRDUax8L0QorWhpbHdvkIIA00S2C:9lblIZQNcj8hoaHb9IA00Sd

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d9c87a18a49d0c939b25eaf0e786c18cffa97afdc8b9fe8adaabd8e49cf71a23.exe
    .exe windows:6 windows x86 arch:x86

    9afa74f09d19900a85844b7a585219b4


    Headers

    Imports

    Sections