General

  • Target

    308c11e05c421f9b9570612c617795d901a7fa80f7db84dad84fefe3b6309081

  • Size

    245KB

  • Sample

    230114-1nw93shh5x

  • MD5

    5c302f591507360e543f1411c575f128

  • SHA1

    1a9e5adf4f683a1cca59a9663135444406cd9a48

  • SHA256

    308c11e05c421f9b9570612c617795d901a7fa80f7db84dad84fefe3b6309081

  • SHA512

    4dd79a037ed232dc4f4dbce11cff8d24f7e6a4bb0100481c91481506e37fbc2c555277ab6ab336c0bffba3eecc645d97c7215c635c329a54eed2931f55d86778

  • SSDEEP

    3072:bXx/YYUi8u3Kl5g5k3+M8XI+uSyo8CGAQ6b2q1+bhf8S3NNJZxV/japb:zXUivM+SfAn6qo3NEp

Score
10/10

Malware Config

Extracted

Family

lumma

C2

77.73.134.68

Targets

    • Target

      308c11e05c421f9b9570612c617795d901a7fa80f7db84dad84fefe3b6309081

    • Size

      245KB

    • MD5

      5c302f591507360e543f1411c575f128

    • SHA1

      1a9e5adf4f683a1cca59a9663135444406cd9a48

    • SHA256

      308c11e05c421f9b9570612c617795d901a7fa80f7db84dad84fefe3b6309081

    • SHA512

      4dd79a037ed232dc4f4dbce11cff8d24f7e6a4bb0100481c91481506e37fbc2c555277ab6ab336c0bffba3eecc645d97c7215c635c329a54eed2931f55d86778

    • SSDEEP

      3072:bXx/YYUi8u3Kl5g5k3+M8XI+uSyo8CGAQ6b2q1+bhf8S3NNJZxV/japb:zXUivM+SfAn6qo3NEp

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v6

Tasks