Overview

overview

10

Static

static

10

00bb8c74a3...__.exe

windows7-x64

10

00bb8c74a3...__.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    00bb8c74a3545f2971cd5b5f6761ac10c544c40dc99dab75ed01cdbd56c94d70__uncoverit.org__.sample.7z

  • Size

    136KB

  • MD5

    b8175ef33d98f414b726517ef4eb2174

  • SHA1

    0c1290f2e7642f946f21634e89c49c2abc819a06

  • SHA256

    9a5c12e47867b3c972b3c516c7c44c9fa2c115bc0653fb1b4460284612ebd405

  • SHA512

    376e927e472a5a9b84d208f2089c31e02cc349591ecaf85639bded0f7038c820a4f6c9fef9e4c13a29195067547c2cc8dee8625aa7d837b50e6cb1ab64107a27

  • SSDEEP

    3072:18us4KOVkBgqr0gNZBn5mP57t7XcJE/O3:1TsjgXaBn5CPLcJX

Score
10/10
stealerlumma

Malware Config

Extracted

Family

lumma

C2

https://rapeflowwj.lat/api

https://crosshuaht.lat/api

https://sustainskelet.lat/api

https://aspecteirs.lat/api

https://energyaffai.lat/api

https://necklacebudi.lat/api

https://discokeyus.lat/api

https://grannyejh.lat/api

https://volcanoyev.click/api

Signatures

  • Lumma family
    lumma
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 00bb8c74a3545f2971cd5b5f6761ac10c544c40dc99dab75ed01cdbd56c94d70__uncoverit.org__.sample.7z
    .7z

    Password: infected

  • 00bb8c74a3545f2971cd5b5f6761ac10c544c40dc99dab75ed01cdbd56c94d70__uncoverit.org__.sample
    .exe windows:6 windows x86 arch:x86

    f12ef0517c38c05cea3130091585ea2f


    Headers

    Imports

    Sections