lumma | aa1a786f2ae548fab0c1927e801352fe46702b220ab18881deb757d5048f68d5 | Triage

Sharing

General

Target

aa1a786f2ae548fab0c1927e801352fe46702b220ab18881deb757d5048f68d5
Size

246KB
Sample

230117-edm3rsdh8w
MD5

3af75ff6fabe2f5c995e3d65f2d71a47
SHA1

33e658619b8ce80220970f451ba9cbad90bd9149
SHA256

aa1a786f2ae548fab0c1927e801352fe46702b220ab18881deb757d5048f68d5
SHA512

ef639040d17f06bacc5ffada79426c96790a0a55f466e6917953171fc773b0dd80a32a365c50bd3bb55614a7cc0fed0babe746013e8caeb4b590171f764e105c
SSDEEP

6144:VZ43zLiKdsWZRXVSWhUmBQ6I2/yohDHX:L4jPds+FlNBQOaE

Score

10^/10

lumma spyware stealer

Malware Config

Extracted

Family

lumma

C2

77.73.134.68

Targets

- Target
  
  aa1a786f2ae548fab0c1927e801352fe46702b220ab18881deb757d5048f68d5
- Size
  
  246KB
- MD5
  
  3af75ff6fabe2f5c995e3d65f2d71a47
- SHA1
  
  33e658619b8ce80220970f451ba9cbad90bd9149
- SHA256
  
  aa1a786f2ae548fab0c1927e801352fe46702b220ab18881deb757d5048f68d5
- SHA512
  
  ef639040d17f06bacc5ffada79426c96790a0a55f466e6917953171fc773b0dd80a32a365c50bd3bb55614a7cc0fed0babe746013e8caeb4b590171f764e105c
- SSDEEP
  
  6144:VZ43zLiKdsWZRXVSWhUmBQ6I2/yohDHX:L4jPds+FlNBQOaE
Score

10^/10

lumma spyware stealer
- Lumma Stealer
  An infostealer written in C++ first seen in August 2022.
  stealer lumma
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

lummaspywarestealer