Resubmissions

21-03-2023 23:04

230321-22c9ssdf27 10

21-03-2023 22:48

230321-2rl4ysfe5z 10

General

  • Target

    Berkay.exe

  • Size

    56.5MB

  • Sample

    230321-2rl4ysfe5z

  • MD5

    9e8092d308530bc74848eb3ae5ec835e

  • SHA1

    9cd4708d0da074b03e75ec70333981a90b58974e

  • SHA256

    b57075f06ca1ed41d425367ef08b37b9f87fb88e54d650307485672bce63a87e

  • SHA512

    298e039196e17397d45920e71a18814aeb5a941b157cc138aa9590528e85aab01aa60bb3a7f83372b0daf36c050d6f80b3415e1a21ae4b347ec590a70c23c413

  • SSDEEP

    786432:57v+nGMHGwpylp8SmAzvOCfhQl/78QUR7Gy7RAxsmITaiXlC2RHeNpCbwf08NhCJ:CG8pcL5Qly1R6sQVfpnxNhCcrm7

Score
10/10

Malware Config

Targets

    • Target

      Berkay.exe

    • Size

      56.5MB

    • MD5

      9e8092d308530bc74848eb3ae5ec835e

    • SHA1

      9cd4708d0da074b03e75ec70333981a90b58974e

    • SHA256

      b57075f06ca1ed41d425367ef08b37b9f87fb88e54d650307485672bce63a87e

    • SHA512

      298e039196e17397d45920e71a18814aeb5a941b157cc138aa9590528e85aab01aa60bb3a7f83372b0daf36c050d6f80b3415e1a21ae4b347ec590a70c23c413

    • SSDEEP

      786432:57v+nGMHGwpylp8SmAzvOCfhQl/78QUR7Gy7RAxsmITaiXlC2RHeNpCbwf08NhCJ:CG8pcL5Qly1R6sQVfpnxNhCcrm7

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Discovery

System Information Discovery

1
T1082

Process Discovery

1
T1057

Collection

Data from Local System

1
T1005

Tasks