lumma | 7b9e17219d79e0535177f413836088cf5fafb5854f3d2b18856a9834e0ef2084 | Triage

Sharing

General

Target

7b9e17219d79e0535177f413836088cf5fafb5854f3d2b18856a9834e0ef2084
Size

248KB
Sample

230116-by1b2sbc9t
MD5

e2d40676fa2b1dd7966d50ccbf5acbde
SHA1

e54498df173d571cff586b7594762b054ced5ea6
SHA256

7b9e17219d79e0535177f413836088cf5fafb5854f3d2b18856a9834e0ef2084
SHA512

3b70d0ad0b660360381654a63bc4989a982ba505ae2183bc4b31573c083eb703c8c01ae57df7c48a4dde937774067fbd7680054c90b50abcb7e056bc445059df
SSDEEP

3072:9MX2Ute7uzcCd57wA9ZuRuzXlRfG8qL8o3pYoA3P1i:9IPzQAuYX/GfQCR

Score

10^/10

lumma spyware stealer

Malware Config

Extracted

Family

lumma

C2

77.73.134.68

Targets

- Target
  
  7b9e17219d79e0535177f413836088cf5fafb5854f3d2b18856a9834e0ef2084
- Size
  
  248KB
- MD5
  
  e2d40676fa2b1dd7966d50ccbf5acbde
- SHA1
  
  e54498df173d571cff586b7594762b054ced5ea6
- SHA256
  
  7b9e17219d79e0535177f413836088cf5fafb5854f3d2b18856a9834e0ef2084
- SHA512
  
  3b70d0ad0b660360381654a63bc4989a982ba505ae2183bc4b31573c083eb703c8c01ae57df7c48a4dde937774067fbd7680054c90b50abcb7e056bc445059df
- SSDEEP
  
  3072:9MX2Ute7uzcCd57wA9ZuRuzXlRfG8qL8o3pYoA3P1i:9IPzQAuYX/GfQCR
Score

10^/10

lumma spyware stealer
- Lumma Stealer
  An infostealer written in C++ first seen in August 2022.
  stealer lumma
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

lummaspywarestealer