General

  • Target

    9cd87a8050aadd59dedeedfe415a27d0a9f21508e552b21724872ce64d924242

  • Size

    245KB

  • Sample

    230114-x88basge2s

  • MD5

    e18f1fd1040b9d95ad88b298b3539d8a

  • SHA1

    e93f54c3579da8c9dc119a50728c4ccdf768eae2

  • SHA256

    9cd87a8050aadd59dedeedfe415a27d0a9f21508e552b21724872ce64d924242

  • SHA512

    d1505e6b25a2638ec65ffd1fbf52a7b492f90a1ea14836c62d6181515b95cd3c0687ef821e84094d6549fa4f536809807ba89d5644d3922ce761b1267e175bcc

  • SSDEEP

    3072:gXE+bPEBc7OKA5NyhVmNT7qkKr3I5cPjnyYTr2jJWNJhUTqxb5A5apb:U7EBkZZv0GLxTrqWPaTRUp

Score
10/10

Malware Config

Extracted

Family

lumma

C2

77.73.134.68

Targets

    • Target

      9cd87a8050aadd59dedeedfe415a27d0a9f21508e552b21724872ce64d924242

    • Size

      245KB

    • MD5

      e18f1fd1040b9d95ad88b298b3539d8a

    • SHA1

      e93f54c3579da8c9dc119a50728c4ccdf768eae2

    • SHA256

      9cd87a8050aadd59dedeedfe415a27d0a9f21508e552b21724872ce64d924242

    • SHA512

      d1505e6b25a2638ec65ffd1fbf52a7b492f90a1ea14836c62d6181515b95cd3c0687ef821e84094d6549fa4f536809807ba89d5644d3922ce761b1267e175bcc

    • SSDEEP

      3072:gXE+bPEBc7OKA5NyhVmNT7qkKr3I5cPjnyYTr2jJWNJhUTqxb5A5apb:U7EBkZZv0GLxTrqWPaTRUp

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v6

Tasks