Overview

overview

10

Static

static

1

554dbb9a2d...12.exe

windows7-x64

10

554dbb9a2d...12.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    554dbb9a2d3a6a1ec7059dff09ae50968142b1edfd12114a966b0c940987e212.zip

  • Size

    796KB

  • Sample

    230321-r1f9ysdc91

  • MD5

    12ef0827ed1136e344fd7d7b2482111b

  • SHA1

    ce75448f99cecb72fc6159e1cd5cd315bec2bf68

  • SHA256

    598c900c5fc4c50bedb69b34cf851ec6e402d761e124223394cf71d846c139be

  • SHA512

    718869ac07a8242a2c2b00d6f1d41aeaf35b982cea5586004297fc5e40c9a8be390678598cdaeea0925e45b6d9c9604ea037dd14d428ba910bf50b2451a76f62

  • SSDEEP

    24576:yYVyJqsMQciIuB2E+ACZqsG5H+pvQMFCy0BBsTdL8:yXJ9bOqR5HCFCdshL8

Score
10/10
lummadiscoveryspywarestealer

Malware Config

Targets

    • Target

      554dbb9a2d3a6a1ec7059dff09ae50968142b1edfd12114a966b0c940987e212.exe

    • Size

      855KB

    • MD5

      bbf51befc3845103afe1886b87cb83f3

    • SHA1

      bb46030f8cb631a931b5a9abc402128dee658df2

    • SHA256

      554dbb9a2d3a6a1ec7059dff09ae50968142b1edfd12114a966b0c940987e212

    • SHA512

      ad4ce49d1bd5a0c8eb4e25a36f43efa54b92a15408832aec825d900be9027b7e435694a83044565b5dd4ddd0671da8013798b1895ba3681ec7beb81459625787

    • SSDEEP

      24576:3+jKVyjN9tiqrIySjKQ8msZasS8fU3wfi:3WjN9ti2wj8ju8Mgfi

    Score
    10/10
    lummadiscoveryspywarestealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

2
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

2
T1005

Exfiltration

Command and Control

Impact

Tasks