General

  • Target

    bc8bbc7fe27c26fc2cc771cabe97fa10968291b43507924b315f74ecb79350cb

  • Size

    302KB

  • MD5

    aa5e293b4387fe12eaa2fab264b789be

  • SHA1

    36e9e145f160ec04e896f9c7cb174cf8899a45dc

  • SHA256

    bc8bbc7fe27c26fc2cc771cabe97fa10968291b43507924b315f74ecb79350cb

  • SHA512

    b17fe11219d234c5720cf60c27437af14c46498d5a1c48bbf58c6b1e00f1cc3e93b988b2e669ed743a320042c23173dfcc39429898ca5a803764ad157a9ddc22

  • SSDEEP

    6144:+eGlkYytRzWO72BJkaLweWTKG8rWkXYh6n5HtYPq/n0Cae5bfF6Lk9HWVqBPEo26:FYuR6O723kaLnMh653xQLkBWVqBco2tR

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bc8bbc7fe27c26fc2cc771cabe97fa10968291b43507924b315f74ecb79350cb
    .exe windows:6 windows x86 arch:x86

    71e0d6fab5f31c6d74b68ae2c05f0d5a


    Headers

    Imports

    Sections