General

  • Target

    eceebaf302a1689fc6681a7f50b3f27e9e5277a0d4a5803bf07acb44898ec2de

  • Size

    313KB

  • Sample

    221026-qnls8sfhbk

  • MD5

    c01e2110a04d71edf7a982b164f5e343

  • SHA1

    31267c92bd7fdfa8d4ae1101f2dde8ac0ee40065

  • SHA256

    eceebaf302a1689fc6681a7f50b3f27e9e5277a0d4a5803bf07acb44898ec2de

  • SHA512

    390b76ab0c0e2ce2ea2e1a46885429db69730c56c915c6a33a51931f2804c64eb1842400cc109850bb68758678f2af8ac7d9b1ac2119937f41a58412f53a131c

  • SSDEEP

    6144:EsUGtVi+8aPufCllxaRpxD/sm0dgniga:EsU0F+axMxzsdgi

Score
10/10

Malware Config

Extracted

Family

lumma

C2

http://traftech.pro

Targets

    • Target

      eceebaf302a1689fc6681a7f50b3f27e9e5277a0d4a5803bf07acb44898ec2de

    • Size

      313KB

    • MD5

      c01e2110a04d71edf7a982b164f5e343

    • SHA1

      31267c92bd7fdfa8d4ae1101f2dde8ac0ee40065

    • SHA256

      eceebaf302a1689fc6681a7f50b3f27e9e5277a0d4a5803bf07acb44898ec2de

    • SHA512

      390b76ab0c0e2ce2ea2e1a46885429db69730c56c915c6a33a51931f2804c64eb1842400cc109850bb68758678f2af8ac7d9b1ac2119937f41a58412f53a131c

    • SSDEEP

      6144:EsUGtVi+8aPufCllxaRpxD/sm0dgniga:EsU0F+axMxzsdgi

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Downloads MZ/PE file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v6

Tasks