General

  • Target

    bfc8b43d4c867e28e5409b7bb74ea79f.exe

  • Size

    308KB

  • Sample

    230113-whe2dsfa5x

  • MD5

    bfc8b43d4c867e28e5409b7bb74ea79f

  • SHA1

    d720e74f073ccaf61c3a45ea4b09c2da38c3a753

  • SHA256

    36a5d6a13251512cbd0b5ea2b9b34c737d03de659532f4a13a6a9523c4a24c72

  • SHA512

    84e9bd7089f1cd66dab994997fcb2336d6284eea965832e202d4f70e179cf6e4e9ef8f843cae5a63591a25bd590dd2060820cc707e34574ae736a52006c95e6f

  • SSDEEP

    6144:0diaLB6JorGojJon2NleO4SlJZ9tzrSA3N+:0diaAJOrja2Nt1Z9P3

Score
10/10

Malware Config

Extracted

Family

lumma

C2

77.73.134.68

Targets

    • Target

      bfc8b43d4c867e28e5409b7bb74ea79f.exe

    • Size

      308KB

    • MD5

      bfc8b43d4c867e28e5409b7bb74ea79f

    • SHA1

      d720e74f073ccaf61c3a45ea4b09c2da38c3a753

    • SHA256

      36a5d6a13251512cbd0b5ea2b9b34c737d03de659532f4a13a6a9523c4a24c72

    • SHA512

      84e9bd7089f1cd66dab994997fcb2336d6284eea965832e202d4f70e179cf6e4e9ef8f843cae5a63591a25bd590dd2060820cc707e34574ae736a52006c95e6f

    • SSDEEP

      6144:0diaLB6JorGojJon2NleO4SlJZ9tzrSA3N+:0diaAJOrja2Nt1Z9P3

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v6

Tasks