lumma | 7f0c1464c6a11fde367c055d4d55809c352553cf384809b4675e8bd5b471e9df | Triage

Sharing

General

Target

7f0c1464c6a11fde367c055d4d55809c352553cf384809b4675e8bd5b471e9df
Size

247KB
Sample

230117-fcqb6sad63
MD5

1d9305c1f85a983614fc2917225d3f6a
SHA1

c9edc09c37ab9d68513d07658f89fdce520934ef
SHA256

7f0c1464c6a11fde367c055d4d55809c352553cf384809b4675e8bd5b471e9df
SHA512

e194e6a13b325360833d16f2a3ae46701185b1770017ef661d1e766fe1bb3cf42e207d35efdc297a5e995a560930a27f5df58c062013a2c6fb06f70c2c76183d
SSDEEP

6144:hZuhKLHC3yWm0R7Y/GOl2jYk4XsM9y4DHX:fuY23y1a7Y/GOl2b4XsQ

Score

10^/10

lumma spyware stealer

Malware Config

Extracted

Family

lumma

C2

77.73.134.68

Targets

- Target
  
  7f0c1464c6a11fde367c055d4d55809c352553cf384809b4675e8bd5b471e9df
- Size
  
  247KB
- MD5
  
  1d9305c1f85a983614fc2917225d3f6a
- SHA1
  
  c9edc09c37ab9d68513d07658f89fdce520934ef
- SHA256
  
  7f0c1464c6a11fde367c055d4d55809c352553cf384809b4675e8bd5b471e9df
- SHA512
  
  e194e6a13b325360833d16f2a3ae46701185b1770017ef661d1e766fe1bb3cf42e207d35efdc297a5e995a560930a27f5df58c062013a2c6fb06f70c2c76183d
- SSDEEP
  
  6144:hZuhKLHC3yWm0R7Y/GOl2jYk4XsM9y4DHX:fuY23y1a7Y/GOl2b4XsQ
Score

10^/10

lumma spyware stealer
- Lumma Stealer
  An infostealer written in C++ first seen in August 2022.
  stealer lumma
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

lummaspywarestealer