lumma | 24983b29eacb6102ad265e77dfe45bc81a7e98f054531e7fd7f6cdbd092851f9 | Triage

Sharing

General

Target

24983b29eacb6102ad265e77dfe45bc81a7e98f054531e7fd7f6cdbd092851f9
Size

249KB
Sample

230117-jsj2wace67
MD5

bb8276be4316c2a5f0a8ee505577aab9
SHA1

1c358c8df6ffb8178f026061b3e8102239c4c223
SHA256

24983b29eacb6102ad265e77dfe45bc81a7e98f054531e7fd7f6cdbd092851f9
SHA512

1893f04be8579f09460b2bec32e567978c3001bde277fca4ef061cc260956a5ec4d0d8f3e42b3017b78295e36c22fe73716fce9f66e5072aa5e0baa1cd51ce0e
SSDEEP

6144:K87FgpB3rgECNa8N9D0tplUAGXPs9T2v2:K87FgPNCVpQplxKY2v

Score

10^/10

lumma spyware stealer

Malware Config

Extracted

Family

lumma

C2

77.73.134.68

Targets

- Target
  
  24983b29eacb6102ad265e77dfe45bc81a7e98f054531e7fd7f6cdbd092851f9
- Size
  
  249KB
- MD5
  
  bb8276be4316c2a5f0a8ee505577aab9
- SHA1
  
  1c358c8df6ffb8178f026061b3e8102239c4c223
- SHA256
  
  24983b29eacb6102ad265e77dfe45bc81a7e98f054531e7fd7f6cdbd092851f9
- SHA512
  
  1893f04be8579f09460b2bec32e567978c3001bde277fca4ef061cc260956a5ec4d0d8f3e42b3017b78295e36c22fe73716fce9f66e5072aa5e0baa1cd51ce0e
- SSDEEP
  
  6144:K87FgpB3rgECNa8N9D0tplUAGXPs9T2v2:K87FgPNCVpQplxKY2v
Score

10^/10

lumma spyware stealer
- Lumma Stealer
  An infostealer written in C++ first seen in August 2022.
  stealer lumma
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

lummaspywarestealer