General

  • Target

    7b9e17219d79e0535177f413836088cf5fafb5854f3d2b18856a9834e0ef2084

  • Size

    248KB

  • Sample

    230116-by1b2sbc9t

  • MD5

    e2d40676fa2b1dd7966d50ccbf5acbde

  • SHA1

    e54498df173d571cff586b7594762b054ced5ea6

  • SHA256

    7b9e17219d79e0535177f413836088cf5fafb5854f3d2b18856a9834e0ef2084

  • SHA512

    3b70d0ad0b660360381654a63bc4989a982ba505ae2183bc4b31573c083eb703c8c01ae57df7c48a4dde937774067fbd7680054c90b50abcb7e056bc445059df

  • SSDEEP

    3072:9MX2Ute7uzcCd57wA9ZuRuzXlRfG8qL8o3pYoA3P1i:9IPzQAuYX/GfQCR

Score
10/10

Malware Config

Extracted

Family

lumma

C2

77.73.134.68

Targets

    • Target

      7b9e17219d79e0535177f413836088cf5fafb5854f3d2b18856a9834e0ef2084

    • Size

      248KB

    • MD5

      e2d40676fa2b1dd7966d50ccbf5acbde

    • SHA1

      e54498df173d571cff586b7594762b054ced5ea6

    • SHA256

      7b9e17219d79e0535177f413836088cf5fafb5854f3d2b18856a9834e0ef2084

    • SHA512

      3b70d0ad0b660360381654a63bc4989a982ba505ae2183bc4b31573c083eb703c8c01ae57df7c48a4dde937774067fbd7680054c90b50abcb7e056bc445059df

    • SSDEEP

      3072:9MX2Ute7uzcCd57wA9ZuRuzXlRfG8qL8o3pYoA3P1i:9IPzQAuYX/GfQCR

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v6

Tasks