Analysis
-
max time kernel
90s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
17-01-2023 04:43
General
-
Target
7f0c1464c6a11fde367c055d4d55809c352553cf384809b4675e8bd5b471e9df.exe
-
Size
247KB
-
MD5
1d9305c1f85a983614fc2917225d3f6a
-
SHA1
c9edc09c37ab9d68513d07658f89fdce520934ef
-
SHA256
7f0c1464c6a11fde367c055d4d55809c352553cf384809b4675e8bd5b471e9df
-
SHA512
e194e6a13b325360833d16f2a3ae46701185b1770017ef661d1e766fe1bb3cf42e207d35efdc297a5e995a560930a27f5df58c062013a2c6fb06f70c2c76183d
-
SSDEEP
6144:hZuhKLHC3yWm0R7Y/GOl2jYk4XsM9y4DHX:fuY23y1a7Y/GOl2b4XsQ
Score
10/10
Malware Config
Extracted
Family
lumma
C2
77.73.134.68
Signatures
-
Lumma Stealer
An infostealer written in C++ first seen in August 2022.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Accesses cryptocurrency files/wallets, possible credential harvesting 2 TTPs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7f0c1464c6a11fde367c055d4d55809c352553cf384809b4675e8bd5b471e9df.exe"C:\Users\Admin\AppData\Local\Temp\7f0c1464c6a11fde367c055d4d55809c352553cf384809b4675e8bd5b471e9df.exe"1⤵
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1352-132-0x0000000000711000-0x000000000072B000-memory.dmpFilesize
104KB
-
memory/1352-133-0x0000000002190000-0x00000000021BA000-memory.dmpFilesize
168KB
-
memory/1352-134-0x0000000000400000-0x0000000000444000-memory.dmpFilesize
272KB
-
memory/1352-135-0x0000000000400000-0x0000000000444000-memory.dmpFilesize
272KB