Malicious
PE Executable
MD5: 29b42ea66238343322eacb9fd0c8b1b4
Size: 317.44 KB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 29b42ea66238343322eacb9fd0c8b1b4 |
| Sha1 | 2ef48e359e02ff7bfdf099efeb38cb7a8deac775 |
| Sha256 | 4d5fd4d96346fb4b09dccb7836ca2dedd339622a6e6063b4dbec1af83cca94f5 |
| Sha384 | 778931152c2f98b1b0ccb85ae94d7f1c711554b237b2f027c23d3392c5cd24f14ae5f128907ec2d0e0ca6ce399647764 |
| Sha512 | 335e9fa062168ad1347fac0a4ec0ce1d408325e98560b240586b9c5e352aedfc8ef4da7e44ff025fce9e1300033065f8e5f3dc30636a4d94431592f13b8ef47b |
| SSDeep | 6144:gBpTG4BXpGV/5i0KwFEIw8LaggfR4IKqI1jgn+ICP8QSoM:YTPGrC3DDIVgCPA |
| TLSH | 6A647C09DB7750E0D94A807530E9F33B5A342B2683288DDBDBD0DF58A963BE29477907 |
PeID
Microsoft Visual C++ v6.0 DLLPeStubOEP v1.x
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
LummaEncrypted@0003F800 [0123456789abcdef]
UNKNWOWNmalicious
?huhuhuhu
LummaEncrypted@0003F813 [0123456789ABCDEF]
UNKNWOWNmalicious
?huhuhuhu
LummaEncrypted@0003F828 [00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899]
UNKNWOWNmalicious
huhuhuhuhuhuhuhuhuhuhu
LummaEncrypted@00040B18 [00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899]
UNKNWOWNmalicious
huhuhuhuhuhuhuhuhuhuhu
LummaEncrypted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
UNKNWOWNmalicious
huhuhuhuhuhuhuhuhuhuhu
LummaEncrypted@00041505 [7492108092]
UNKNWOWNmalicious
?huhuhuhu
LummaEncrypted@00041C40 [0123456789ABCDEF]
UNKNWOWNmalicious
?huhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LummaEncrypted@0003F800 [0123456789abcdef]
UNKNWOWNmalicious
?huhuhuhu
29b42ea66238343322eacb9fd0c8b1b4
LummaEncrypted@0003F813 [0123456789ABCDEF]
UNKNWOWNmalicious
?huhuhuhu
29b42ea66238343322eacb9fd0c8b1b4
LummaEncrypted@0003F828 [00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899]
UNKNWOWNmalicious
huhuhuhuhuhuhuhuhuhuhu
29b42ea66238343322eacb9fd0c8b1b4
LummaEncrypted@00040B18 [00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899]
UNKNWOWNmalicious
huhuhuhuhuhuhuhuhuhuhu
29b42ea66238343322eacb9fd0c8b1b4
LummaEncrypted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
UNKNWOWNmalicious
huhuhuhuhuhuhuhuhuhuhu
29b42ea66238343322eacb9fd0c8b1b4
LummaEncrypted@00041505 [7492108092]
UNKNWOWNmalicious
?huhuhuhu
29b42ea66238343322eacb9fd0c8b1b4
LummaEncrypted@00041C40 [0123456789ABCDEF]
UNKNWOWNmalicious
?huhuhuhu
29b42ea66238343322eacb9fd0c8b1b4
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.