Overview

overview

10

Static

static

1

FCmusicsetup.exe

windows7-x64

10

FCmusicsetup.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    FCmusicsetup.vxe

  • Size

    62.5MB

  • Sample

    230315-b4m9nscg6s

  • MD5

    6167f78b6e1eaafaaf24e1caae1d6401

  • SHA1

    0a9c262139d9ce553f16cdc2dec3508394b0742a

  • SHA256

    b181ce11144876ed6cd27b9d9efa4953fcadbe16b2b9a4336cc63ef82427e6e7

  • SHA512

    5308b697f7b214509eb83607b13a9ba2931301874838021a4400771107fd01de6fa332858deca7345638c4a07ca81d735ba55b9561bba49ee177700e3665b10d

  • SSDEEP

    1572864:G6HO9FqwNCTq5FYcfwjD0mO1BinX80bN8px:GmO9b0TMYcfazO1d02/

Score
10/10
lummadiscoverypersistencestealer

Malware Config

Targets

    • Target

      FCmusicsetup.vxe

    • Size

      62.5MB

    • MD5

      6167f78b6e1eaafaaf24e1caae1d6401

    • SHA1

      0a9c262139d9ce553f16cdc2dec3508394b0742a

    • SHA256

      b181ce11144876ed6cd27b9d9efa4953fcadbe16b2b9a4336cc63ef82427e6e7

    • SHA512

      5308b697f7b214509eb83607b13a9ba2931301874838021a4400771107fd01de6fa332858deca7345638c4a07ca81d735ba55b9561bba49ee177700e3665b10d

    • SSDEEP

      1572864:G6HO9FqwNCTq5FYcfwjD0mO1BinX80bN8px:GmO9b0TMYcfazO1d02/

    Score
    10/10
    lummadiscoverypersistencestealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks