Overview

overview

10

Static

static

bfd72bdd4a...f0.exe

windows7-x64

10

bfd72bdd4a...f0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    bfd72bdd4ab311acd0e05211cb01f8671d358540201eb200f613fd80b62291f0.zip
  • Size 205KB
  • Sample220919-lckdtaechm
  • SHA256 4e559c0d675abe7fa177e3aaa267e83f52675fdf9599112926c2a57d46e05202
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
lummaspywarestealer

Malware Config

Extracted

Family

  • lumma

C2

  • http://evetesttech.net

Targets

    • Target
      bfd72bdd4ab311acd0e05211cb01f8671d358540201eb200f613fd80b62291f0
    • Size 346KB
    • SHA256 bfd72bdd4ab311acd0e05211cb01f8671d358540201eb200f613fd80b62291f0
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    lummaspywarestealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Downloads MZ/PE file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks