Analysis
-
max time kernel
55s -
max time network
74s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system -
submitted
13-01-2023 18:37
Static task
static1
General
-
Target
c769cf6be7c500cb36df8727ba9868a95cc8fdd66b42b5e2f66a149768be07ab.exe
-
Size
309KB
-
MD5
4b7d312cb2d868ae46e52f012d0037a8
-
SHA1
5dd7dd8ea6a2641965d1d6920ca51a8c6206fccc
-
SHA256
c769cf6be7c500cb36df8727ba9868a95cc8fdd66b42b5e2f66a149768be07ab
-
SHA512
e85801f74ca750f8a3a6e5037cf95f24f17e2cdd9e5e9ac0f1edf9befc501fb4148b4aabe2d52053402d3ae4fc81d739a33dcbc26fc4cf97fed993ccec7f8375
-
SSDEEP
6144:mpkELZIQXSXKVx72kIgQRtYYqriXzrSlJZ9tzrSA37j:mpkE6QRVgfRtZXOZ9P37j
Malware Config
Extracted
Family
lumma
C2
77.73.134.68
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Accesses cryptocurrency files/wallets, possible credential harvesting 2 TTPs