lumma | 0441aa20a4a9814d4574612494d743039e5e735204cd6b514a636cf77bbc831f | Triage

Sharing

General

Target

0441aa20a4a9814d4574612494d743039e5e735204cd6b514a636cf77bbc831f
Size

248KB
Sample

230115-1r8saagf8w
MD5

a28c87cd2935ac25b99579652739dc79
SHA1

026397e31dee7fe017929ac7d545faa4f9ad6dfb
SHA256

0441aa20a4a9814d4574612494d743039e5e735204cd6b514a636cf77bbc831f
SHA512

3f0f3d701685840fd1a3995573297909258153ed22d109f566e79681357451597cd7b7b04e54fa3a69819d20e95588d4d3a26dd7a77798cee2d9663c18293cbf
SSDEEP

3072:hCXGo0qeoFd5GmHPZUkWi5uIcoq4lxn22eWxZ39jYEBLCYi:hCUrSGkWi/coq8xn2HWj31I

Score

10^/10

lumma spyware stealer

Malware Config

Extracted

Family

lumma

C2

77.73.134.68

Targets

- Target
  
  0441aa20a4a9814d4574612494d743039e5e735204cd6b514a636cf77bbc831f
- Size
  
  248KB
- MD5
  
  a28c87cd2935ac25b99579652739dc79
- SHA1
  
  026397e31dee7fe017929ac7d545faa4f9ad6dfb
- SHA256
  
  0441aa20a4a9814d4574612494d743039e5e735204cd6b514a636cf77bbc831f
- SHA512
  
  3f0f3d701685840fd1a3995573297909258153ed22d109f566e79681357451597cd7b7b04e54fa3a69819d20e95588d4d3a26dd7a77798cee2d9663c18293cbf
- SSDEEP
  
  3072:hCXGo0qeoFd5GmHPZUkWi5uIcoq4lxn22eWxZ39jYEBLCYi:hCUrSGkWi/coq8xn2HWj31I
Score

10^/10

lumma spyware stealer
- Lumma Stealer
  An infostealer written in C++ first seen in August 2022.
  stealer lumma
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

lummaspywarestealer