General

  • Target

    0441aa20a4a9814d4574612494d743039e5e735204cd6b514a636cf77bbc831f

  • Size

    248KB

  • Sample

    230115-1r8saagf8w

  • MD5

    a28c87cd2935ac25b99579652739dc79

  • SHA1

    026397e31dee7fe017929ac7d545faa4f9ad6dfb

  • SHA256

    0441aa20a4a9814d4574612494d743039e5e735204cd6b514a636cf77bbc831f

  • SHA512

    3f0f3d701685840fd1a3995573297909258153ed22d109f566e79681357451597cd7b7b04e54fa3a69819d20e95588d4d3a26dd7a77798cee2d9663c18293cbf

  • SSDEEP

    3072:hCXGo0qeoFd5GmHPZUkWi5uIcoq4lxn22eWxZ39jYEBLCYi:hCUrSGkWi/coq8xn2HWj31I

Score
10/10

Malware Config

Extracted

Family

lumma

C2

77.73.134.68

Targets

    • Target

      0441aa20a4a9814d4574612494d743039e5e735204cd6b514a636cf77bbc831f

    • Size

      248KB

    • MD5

      a28c87cd2935ac25b99579652739dc79

    • SHA1

      026397e31dee7fe017929ac7d545faa4f9ad6dfb

    • SHA256

      0441aa20a4a9814d4574612494d743039e5e735204cd6b514a636cf77bbc831f

    • SHA512

      3f0f3d701685840fd1a3995573297909258153ed22d109f566e79681357451597cd7b7b04e54fa3a69819d20e95588d4d3a26dd7a77798cee2d9663c18293cbf

    • SSDEEP

      3072:hCXGo0qeoFd5GmHPZUkWi5uIcoq4lxn22eWxZ39jYEBLCYi:hCUrSGkWi/coq8xn2HWj31I

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v6

Tasks