General

  • Target

    f8d13608a3238b1909ee373c32ff31930912f69bbad44560a6e10cdd35fe2271

  • Size

    248KB

  • Sample

    230115-ycqxtafc3t

  • MD5

    3d92131e50a1b8aa8e84e987059bf2d3

  • SHA1

    6e0d66119ac618710e2dd1c81e340d079d053304

  • SHA256

    f8d13608a3238b1909ee373c32ff31930912f69bbad44560a6e10cdd35fe2271

  • SHA512

    1d2fc9c7569e169b0179c36a636923444e0ca45ab4360ee834a921d9a45a2357c2cc0011fd99c73b02bfe67405cebf3dc388b4a1efe80fb3518ec9fa8dc75500

  • SSDEEP

    3072:kXWRuxPtPXxs55ZtwvBhSRDiCtOXRrO3Qeen/ZJeQNBMm57i:gPXoP5POX5w2ZYMBf5

Score
10/10

Malware Config

Extracted

Family

lumma

C2

77.73.134.68

Targets

    • Target

      f8d13608a3238b1909ee373c32ff31930912f69bbad44560a6e10cdd35fe2271

    • Size

      248KB

    • MD5

      3d92131e50a1b8aa8e84e987059bf2d3

    • SHA1

      6e0d66119ac618710e2dd1c81e340d079d053304

    • SHA256

      f8d13608a3238b1909ee373c32ff31930912f69bbad44560a6e10cdd35fe2271

    • SHA512

      1d2fc9c7569e169b0179c36a636923444e0ca45ab4360ee834a921d9a45a2357c2cc0011fd99c73b02bfe67405cebf3dc388b4a1efe80fb3518ec9fa8dc75500

    • SSDEEP

      3072:kXWRuxPtPXxs55ZtwvBhSRDiCtOXRrO3Qeen/ZJeQNBMm57i:gPXoP5POX5w2ZYMBf5

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v6

Tasks