General

  • Target

    mustafayilmazruhsat.pdf.exe

  • Size

    56.4MB

  • Sample

    230322-a4g7zsfh7z

  • MD5

    30388ac6c44cfa86c392496e9d29364d

  • SHA1

    e13d27fadbff66e7d7be89da6f0e35a4d68fb999

  • SHA256

    4ef7982ef5805036bdcbf60186596b7e2cfa9e642de75c193871992f8f244407

  • SHA512

    e4fc2206cd232b6980fb24ceda8e9777392f2fbe71f297627baada9a2214deaafce047f3fe7f02409e5e819bd11dc3a9867eceb4c1c0a9c494d17c0261b68e75

  • SSDEEP

    1572864:UG8pKNWPdH6+Ek52A12dF+7bsBq2ubcplCy6l7:pM+fvA12uIY9YplCF7

Score
10/10

Malware Config

Targets

    • Target

      mustafayilmazruhsat.pdf.exe

    • Size

      56.4MB

    • MD5

      30388ac6c44cfa86c392496e9d29364d

    • SHA1

      e13d27fadbff66e7d7be89da6f0e35a4d68fb999

    • SHA256

      4ef7982ef5805036bdcbf60186596b7e2cfa9e642de75c193871992f8f244407

    • SHA512

      e4fc2206cd232b6980fb24ceda8e9777392f2fbe71f297627baada9a2214deaafce047f3fe7f02409e5e819bd11dc3a9867eceb4c1c0a9c494d17c0261b68e75

    • SSDEEP

      1572864:UG8pKNWPdH6+Ek52A12dF+7bsBq2ubcplCy6l7:pM+fvA12uIY9YplCF7

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Discovery

System Information Discovery

1
T1082

Process Discovery

1
T1057

Collection

Data from Local System

1
T1005

Tasks