Behavioral task
behavioral1
Sample
817a988946844440df765ab64052f276470e3081294a4dc4d5d19adb74b3aa8a.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral2
Sample
817a988946844440df765ab64052f276470e3081294a4dc4d5d19adb74b3aa8a.exe
Resource
win10ltsc2021-20250410-en
General
-
Target
817a988946844440df765ab64052f276470e3081294a4dc4d5d19adb74b3aa8a
-
Size
345KB
-
MD5
fc01e536eb60eb27a3f954ccfb7cdc5a
-
SHA1
7355be1ed9bf00067e84f8207345923325fd7d32
-
SHA256
817a988946844440df765ab64052f276470e3081294a4dc4d5d19adb74b3aa8a
-
SHA512
12ce88e18be740d705b2f4305252943322d0578194947bf1f595e3b5a22df708b9abfbe321d8a5422830f49b8692b003f78e85a5d0271a94bf4a74d8c63220e7
-
SSDEEP
6144:+PtFqR7FDwaIJGIDHO4Il8Uc/IX9rER13dLeeWEXTFI1tEnnbGQVNXv9uOS9U:6jqRxJlsu4j2Ngtee/TFI1tEnnbGqNXF
Malware Config
Extracted
lumma
https://wizmodi.digital/njkm
https://soursopsf.run/gsoiao
https://changeaie.top/geps
https://easyupgw.live/eosz
https://liftally.top/xasj
https://upmodini.digital/gokk
https://salaccgfa.top/gsooz
https://zestmodp.top/zeda
https://1xcelmodo.run/nahd
Signatures
-
Lumma family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 817a988946844440df765ab64052f276470e3081294a4dc4d5d19adb74b3aa8a
Files
-
817a988946844440df765ab64052f276470e3081294a4dc4d5d19adb74b3aa8a.exe windows:6 windows x86 arch:x86
044c22c57c465e9ee19bd231c9023c6c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventW
CreateThread
ExitProcess
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeProcess
GlobalLock
GlobalUnlock
shell32
SHGetFileInfoW
SHGetSpecialFolderPathW
gdi32
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
DeleteDC
DeleteObject
GetCurrentObject
GetDIBits
GetObjectW
SelectObject
ole32
CoCreateInstance
CoInitialize
CoInitializeSecurity
CoSetProxyBlanket
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
oleaut32
SysAllocString
SysAllocStringLen
SysFreeString
VariantClear
VariantInit
user32
CloseClipboard
GetClipboardData
GetDC
GetSystemMetrics
GetWindowRect
OpenClipboard
ReleaseDC
Sections
.text Size: 307KB - Virtual size: 306KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ