Resubmissions

30-01-2023 13:11

230130-qfbnascb7x 10

12-01-2023 16:21

230112-ttnrkagf73 7

General

  • Target

    031d7bccaf5900a9b6d90f9edaacddd1.exe

  • Size

    306KB

  • Sample

    230130-qfbnascb7x

  • MD5

    031d7bccaf5900a9b6d90f9edaacddd1

  • SHA1

    bb7667b055fbefff7dd85d508a7c08b011c59795

  • SHA256

    ba71e5fe297e50c9d6584c83aa5cc1d64a6c647ba42f9f9024039152d258749a

  • SHA512

    eb367337b082bdfed5a6b82d0802052263891139c5a57cbb06dbd9ec8169cf6b42aff600ef55d1547d9407bf897d8b6dc410ab242d2992e51e479dcf316ee42e

  • SSDEEP

    3072:WKXEPgfgL8JWZf2Zf5EJeA62FqG96MvqONz8E9VF8zCWx3zTuPx76b5qWbyajt:9sLl2Zoe72UD08yVFIe5gq+

Score
10/10

Malware Config

Extracted

Family

lumma

C2

217.12.206.197

Targets

    • Target

      031d7bccaf5900a9b6d90f9edaacddd1.exe

    • Size

      306KB

    • MD5

      031d7bccaf5900a9b6d90f9edaacddd1

    • SHA1

      bb7667b055fbefff7dd85d508a7c08b011c59795

    • SHA256

      ba71e5fe297e50c9d6584c83aa5cc1d64a6c647ba42f9f9024039152d258749a

    • SHA512

      eb367337b082bdfed5a6b82d0802052263891139c5a57cbb06dbd9ec8169cf6b42aff600ef55d1547d9407bf897d8b6dc410ab242d2992e51e479dcf316ee42e

    • SSDEEP

      3072:WKXEPgfgL8JWZf2Zf5EJeA62FqG96MvqONz8E9VF8zCWx3zTuPx76b5qWbyajt:9sLl2Zoe72UD08yVFIe5gq+

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v6

Tasks