General

  • Target

    50b8f00da97aa0e66bb0a4cc38faa0db.exe

  • Size

    245KB

  • Sample

    230115-q6ywhsfe84

  • MD5

    50b8f00da97aa0e66bb0a4cc38faa0db

  • SHA1

    b2e38e07ad1d5804c2b5486bf88ead1628f5a37a

  • SHA256

    84d7abfe34e17af782be2251cd70e78f03540265d5907426b4f75f32523c59d6

  • SHA512

    150a30420b6dd18986f14281127736358457ca175e143ce95f599a61c56ccfbc5a5bc773259954c3a74d8351003fba3966a57cf78b4593af7380be813f06bbf9

  • SSDEEP

    3072:CXxEtyTUkIiu5KXrYsvdoxG/mo2E46UK4stCkGjeK2tH6i:Cd6EbYsvGxKL46UutC/+H

Score
10/10

Malware Config

Extracted

Family

lumma

C2

77.73.134.68

Targets

    • Target

      50b8f00da97aa0e66bb0a4cc38faa0db.exe

    • Size

      245KB

    • MD5

      50b8f00da97aa0e66bb0a4cc38faa0db

    • SHA1

      b2e38e07ad1d5804c2b5486bf88ead1628f5a37a

    • SHA256

      84d7abfe34e17af782be2251cd70e78f03540265d5907426b4f75f32523c59d6

    • SHA512

      150a30420b6dd18986f14281127736358457ca175e143ce95f599a61c56ccfbc5a5bc773259954c3a74d8351003fba3966a57cf78b4593af7380be813f06bbf9

    • SSDEEP

      3072:CXxEtyTUkIiu5KXrYsvdoxG/mo2E46UK4stCkGjeK2tH6i:Cd6EbYsvGxKL46UutC/+H

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v6

Tasks