Analysis
-
max time kernel
43s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
13-01-2023 17:55
General
-
Target
bfc8b43d4c867e28e5409b7bb74ea79f.exe
-
Size
308KB
-
MD5
bfc8b43d4c867e28e5409b7bb74ea79f
-
SHA1
d720e74f073ccaf61c3a45ea4b09c2da38c3a753
-
SHA256
36a5d6a13251512cbd0b5ea2b9b34c737d03de659532f4a13a6a9523c4a24c72
-
SHA512
84e9bd7089f1cd66dab994997fcb2336d6284eea965832e202d4f70e179cf6e4e9ef8f843cae5a63591a25bd590dd2060820cc707e34574ae736a52006c95e6f
-
SSDEEP
6144:0diaLB6JorGojJon2NleO4SlJZ9tzrSA3N+:0diaAJOrja2Nt1Z9P3
Score
10/10
Malware Config
Extracted
Family
lumma
C2
77.73.134.68
Signatures
-
Lumma Stealer
An infostealer written in C++ first seen in August 2022.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Accesses cryptocurrency files/wallets, possible credential harvesting 2 TTPs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bfc8b43d4c867e28e5409b7bb74ea79f.exe"C:\Users\Admin\AppData\Local\Temp\bfc8b43d4c867e28e5409b7bb74ea79f.exe"1⤵
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
100KB
-
Filesize
168KB
-
Filesize
328KB
-
Filesize
100KB
-
Filesize
328KB