Analysis
-
max time kernel
90s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
17-01-2023 00:31
General
-
Target
7c080a071d5c68d8c2c789a2dda8d91a69f6e82bfdd2e5818207bb50f72e3289.exe
-
Size
247KB
-
MD5
0e52d412ecd6019029d4e03a6415c23f
-
SHA1
617e0e81bda472721c190459f2f94cf6f224ddff
-
SHA256
7c080a071d5c68d8c2c789a2dda8d91a69f6e82bfdd2e5818207bb50f72e3289
-
SHA512
81285d06d8a35db32e6057080d70aeebf9ea7c178db2163ea16efd307990246546e4f83c9a2ab271a9e991223a7ff61ef20d57ec36630b7f23c26fd1b47893c6
-
SSDEEP
3072:PHZwgf0QhL07VX2hjsFXDdcHV4yfGlCquQ5kImynnqrQ2N74+BlvWjsXcmkH2DKw:PZTf/LRh4FWZwCoxBq0IbBl+4RDHX
Score
10/10
Malware Config
Extracted
Family
lumma
C2
77.73.134.68
Signatures
-
Lumma Stealer
An infostealer written in C++ first seen in August 2022.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Accesses cryptocurrency files/wallets, possible credential harvesting 2 TTPs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7c080a071d5c68d8c2c789a2dda8d91a69f6e82bfdd2e5818207bb50f72e3289.exe"C:\Users\Admin\AppData\Local\Temp\7c080a071d5c68d8c2c789a2dda8d91a69f6e82bfdd2e5818207bb50f72e3289.exe"1⤵
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2420-132-0x00000000007D1000-0x00000000007EB000-memory.dmpFilesize
104KB
-
memory/2420-133-0x0000000000700000-0x000000000072A000-memory.dmpFilesize
168KB
-
memory/2420-134-0x0000000000400000-0x0000000000443000-memory.dmpFilesize
268KB
-
memory/2420-135-0x0000000000400000-0x0000000000443000-memory.dmpFilesize
268KB