General

  • Target

    bf5d896f17aeb92410936bb8c5108a250d45ba3737dee165993b7248737d8ee5

  • Size

    244KB

  • Sample

    230115-hab3wabb98

  • MD5

    41eef474359da4ec49be380f481d19ca

  • SHA1

    e5553f3903050b992c16bb2bffd9f8c39f73aea5

  • SHA256

    bf5d896f17aeb92410936bb8c5108a250d45ba3737dee165993b7248737d8ee5

  • SHA512

    cbd57d5baf250f1113a18f3a8c72e9c073c1afae22e2f874eb96bd3d4347aea4cdb0dfb071c4d09b2a13561ad9539f95f1698bc8a980c4be8e8240f786485fb2

  • SSDEEP

    3072:zXdG+1wCT1HIrR95oegaptAohfcHcmSPf5VkSK9T8/Blfwlu1gxBWeujapb:rDwCT1yOaPAohgi35V89Q/Blf2uuVp

Score
10/10

Malware Config

Extracted

Family

lumma

C2

77.73.134.68

Targets

    • Target

      bf5d896f17aeb92410936bb8c5108a250d45ba3737dee165993b7248737d8ee5

    • Size

      244KB

    • MD5

      41eef474359da4ec49be380f481d19ca

    • SHA1

      e5553f3903050b992c16bb2bffd9f8c39f73aea5

    • SHA256

      bf5d896f17aeb92410936bb8c5108a250d45ba3737dee165993b7248737d8ee5

    • SHA512

      cbd57d5baf250f1113a18f3a8c72e9c073c1afae22e2f874eb96bd3d4347aea4cdb0dfb071c4d09b2a13561ad9539f95f1698bc8a980c4be8e8240f786485fb2

    • SSDEEP

      3072:zXdG+1wCT1HIrR95oegaptAohfcHcmSPf5VkSK9T8/Blfwlu1gxBWeujapb:rDwCT1yOaPAohgi35V89Q/Blf2uuVp

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v6

Tasks