Overview

overview

10

Static

static

1

Blitz-2.0.96.exe

windows7-x64

7

Blitz-2.0.96.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Blitz-2.0.96.exe

  • Size

    84.2MB

  • Sample

    230318-fdlelsbc59

  • MD5

    331216d15b15b6ac67982cf666d2aae9

  • SHA1

    bcbafadac4d0e744025a73affb4bf2e543006457

  • SHA256

    3b8d15264b2a34325c4ea686572ad35bdc8d345122b8de89f1e4d9c29e79c453

  • SHA512

    605006af91cbdf1895210e12f445a24d1fff93cbaec668dcc81d94f9b96cabd8d7ff66b47955cc5d3798cc659219798ecabf82b3bbd72b6fd4665e67eb5c3cb7

  • SSDEEP

    1572864:bdViF+XNbjZIDtC8E7evkv9phDMGququzNuZtJ/Tfof93HZ4fC2SHociJ+r:bqqNb9IDoze0D7rquzN47fodHZliAr

Score
10/10
lummadiscoverystealer

Malware Config

Targets

    • Target

      Blitz-2.0.96.exe

    • Size

      84.2MB

    • MD5

      331216d15b15b6ac67982cf666d2aae9

    • SHA1

      bcbafadac4d0e744025a73affb4bf2e543006457

    • SHA256

      3b8d15264b2a34325c4ea686572ad35bdc8d345122b8de89f1e4d9c29e79c453

    • SHA512

      605006af91cbdf1895210e12f445a24d1fff93cbaec668dcc81d94f9b96cabd8d7ff66b47955cc5d3798cc659219798ecabf82b3bbd72b6fd4665e67eb5c3cb7

    • SSDEEP

      1572864:bdViF+XNbjZIDtC8E7evkv9phDMGququzNuZtJ/Tfof93HZ4fC2SHociJ+r:bqqNb9IDoze0D7rquzN47fodHZliAr

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks