Overview

overview

10

Static

static

1

Blitz-2.0.98.exe

windows7-x64

10

Blitz-2.0.98.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Blitz-2.0.98.exe

  • Size

    85.3MB

  • Sample

    230317-2g9r9sac39

  • MD5

    9614c4f951ada2f0f449cfe42cc9592f

  • SHA1

    0e24545e2fff513c72f50fe0cdc3756e63601cf4

  • SHA256

    32495d49e1abb5d7f2ce1c7c87a10a0eb59ee2d7b38533adc9d8e1e1857d0037

  • SHA512

    dcbc17a4515ddcfc3238681a5d8b0ef658d13fc60a0b5647e4d325e3f738664343914939d19f562b75082acd025cef659c3b7e7b847acd5279dacbc5b83ad331

  • SSDEEP

    1572864:jdoRF+XN7Dt8WRHevkv9phDMGququzNuZtJ/Tfof93sZ4fB2SHo7hZEzRshM:j+qN3p9e0D7rquzN47fodsZHhIRsu

Score
10/10
lummadiscoverystealer

Malware Config

Targets

    • Target

      Blitz-2.0.98.exe

    • Size

      85.3MB

    • MD5

      9614c4f951ada2f0f449cfe42cc9592f

    • SHA1

      0e24545e2fff513c72f50fe0cdc3756e63601cf4

    • SHA256

      32495d49e1abb5d7f2ce1c7c87a10a0eb59ee2d7b38533adc9d8e1e1857d0037

    • SHA512

      dcbc17a4515ddcfc3238681a5d8b0ef658d13fc60a0b5647e4d325e3f738664343914939d19f562b75082acd025cef659c3b7e7b847acd5279dacbc5b83ad331

    • SSDEEP

      1572864:jdoRF+XN7Dt8WRHevkv9phDMGququzNuZtJ/Tfof93sZ4fB2SHo7hZEzRshM:j+qN3p9e0D7rquzN47fodsZHhIRsu

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks