General

  • Target

    bfc8b43d4c867e28e5409b7bb74ea79f.bin

  • Size

    217KB

  • Sample

    230123-lq8nkaed7w

  • MD5

    e7f56e67d15fae3f293b363117137f1c

  • SHA1

    768645d3c872fad7d3825bfedc18ade7edc0f543

  • SHA256

    9b97252485262dd6dea5fdd9c7cabb8c9ef6fbddc206a90f9385e2c0a1d81a83

  • SHA512

    ee7480c25840c7b5c4c9fbbdfb2f50dba86938658a27d0748f80677b5cadd4a8283ed7c60aa5a1ad22c88d3956c295f7dc9f93570698aa195450b70de8b955af

  • SSDEEP

    6144:O0De4AJhE9UGcdShsDc/0DE8dzsWhFiOutkhFmKJl:OYYEPSQ09d1hecll

Score
10/10

Malware Config

Extracted

Family

lumma

C2

77.73.134.68

Targets

    • Target

      36a5d6a13251512cbd0b5ea2b9b34c737d03de659532f4a13a6a9523c4a24c72.exe

    • Size

      308KB

    • MD5

      bfc8b43d4c867e28e5409b7bb74ea79f

    • SHA1

      d720e74f073ccaf61c3a45ea4b09c2da38c3a753

    • SHA256

      36a5d6a13251512cbd0b5ea2b9b34c737d03de659532f4a13a6a9523c4a24c72

    • SHA512

      84e9bd7089f1cd66dab994997fcb2336d6284eea965832e202d4f70e179cf6e4e9ef8f843cae5a63591a25bd590dd2060820cc707e34574ae736a52006c95e6f

    • SSDEEP

      6144:0diaLB6JorGojJon2NleO4SlJZ9tzrSA3N+:0diaAJOrja2Nt1Z9P3

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

2
T1081

Collection

Data from Local System

2
T1005

Tasks