General

  • Target

    db13ad96876cbf17629104b9d55c2da28202568fa3f3e1d9a435475d4b2377d8N.exe

  • Size

    316KB

  • MD5

    beed13c935c1fc4960073e7854513f10

  • SHA1

    0faca945f7d250a9b0efeab975f9acd0daa663c2

  • SHA256

    db13ad96876cbf17629104b9d55c2da28202568fa3f3e1d9a435475d4b2377d8

  • SHA512

    4c95dd7811a8b340beb10b4faf20ec343afe90d44c12be70efecac076f38d9f4432a4f7e455d53af37b20b8aa45e670ddba5bf96877c39ab44ebf9eba0163db2

  • SSDEEP

    6144:1/P9bEUI1OGJQNVmRDUax8L0QorWhpbHdvkIIA00S2:9lblIZQNcj8hoaHb9IA00S

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • db13ad96876cbf17629104b9d55c2da28202568fa3f3e1d9a435475d4b2377d8N.exe
    .exe windows:6 windows x86 arch:x86

    9afa74f09d19900a85844b7a585219b4


    Headers

    Imports

    Sections