General

  • Target

    530b5333fed607d12d1aefddc45f277976d90e51a0792b9cf1cd1d9e72f8d4dc

  • Size

    284KB

  • Sample

    230113-y3grtsge91

  • MD5

    109f04b3df2f9b20d1039554c2fb84e9

  • SHA1

    e21a3a32264cec8f00b5bde2d0679a7ada07cf2b

  • SHA256

    530b5333fed607d12d1aefddc45f277976d90e51a0792b9cf1cd1d9e72f8d4dc

  • SHA512

    d158025d21a229c7440361573406f99952c5c660316ab53d24336b32182c0c4c52bf7cb9f360cf7e862e1a2fa515718ed9c72cce2c1d37e3c30b7f834641df5f

  • SSDEEP

    6144:m4vpLx1EUAeF8lgZP/226meTO7uJZ9tzrSA3:m4vpXEAtP6meHZ9P3

Score
10/10

Malware Config

Extracted

Family

lumma

C2

77.73.134.68

Targets

    • Target

      530b5333fed607d12d1aefddc45f277976d90e51a0792b9cf1cd1d9e72f8d4dc

    • Size

      284KB

    • MD5

      109f04b3df2f9b20d1039554c2fb84e9

    • SHA1

      e21a3a32264cec8f00b5bde2d0679a7ada07cf2b

    • SHA256

      530b5333fed607d12d1aefddc45f277976d90e51a0792b9cf1cd1d9e72f8d4dc

    • SHA512

      d158025d21a229c7440361573406f99952c5c660316ab53d24336b32182c0c4c52bf7cb9f360cf7e862e1a2fa515718ed9c72cce2c1d37e3c30b7f834641df5f

    • SSDEEP

      6144:m4vpLx1EUAeF8lgZP/226meTO7uJZ9tzrSA3:m4vpXEAtP6meHZ9P3

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v6

Tasks