General

  • Target

    4df9430e746d97f555cc0e8eea456ef605083c95c86596a40c3de031ddfc100d

  • Size

    242KB

  • Sample

    230220-k9h2ksad49

  • MD5

    d66290d4822eac65fcdee310417d38ea

  • SHA1

    92aefc10990dbe973c2f2787446466897f9ee55a

  • SHA256

    4df9430e746d97f555cc0e8eea456ef605083c95c86596a40c3de031ddfc100d

  • SHA512

    15ce61a09dc75f716b460889733e46155be6c421f185bc7810c332db42dcd41288898ffe06ebc5f3995a3081b363ba8d645e9a64e136f2ea9de442457544a710

  • SSDEEP

    6144:0Lf+DTTsK+10PI3wGczxnXma2+YPaO/3+pDb9kvbw/xgzy:0CDUKg071xXmJ+aFGpDxkk/xgzy

Malware Config

Targets

    • Target

      4df9430e746d97f555cc0e8eea456ef605083c95c86596a40c3de031ddfc100d

    • Size

      242KB

    • MD5

      d66290d4822eac65fcdee310417d38ea

    • SHA1

      92aefc10990dbe973c2f2787446466897f9ee55a

    • SHA256

      4df9430e746d97f555cc0e8eea456ef605083c95c86596a40c3de031ddfc100d

    • SHA512

      15ce61a09dc75f716b460889733e46155be6c421f185bc7810c332db42dcd41288898ffe06ebc5f3995a3081b363ba8d645e9a64e136f2ea9de442457544a710

    • SSDEEP

      6144:0Lf+DTTsK+10PI3wGczxnXma2+YPaO/3+pDb9kvbw/xgzy:0CDUKg071xXmJ+aFGpDxkk/xgzy

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks