General
-
Target
0887152f919c2571edb295f19263ec2a
-
Size
279KB
-
Sample
230323-gg6emadg69
-
MD5
0887152f919c2571edb295f19263ec2a
-
SHA1
6e7fda80403a379854ee856081cf4a8c861ac23f
-
SHA256
3e1a586aee70f56e14dc8ab2b9091723390db161f48e99d2cb225c48c4db7027
-
SHA512
4f93c726a9b7ceb1770d5c8caea97f7637ef25c7a05231e2f282655d792c8ce1cb91b45118c85376e83742c6eef74b8809d91b174e83bf85983aa7c81e471b86
-
SSDEEP
6144:7q0+dl26TjTpoCFcXnzsVeWQqU5dv9kLmnupOAI+:7qlhTpnqXnQVQq6dv9kLmupBR
Static task
static1
Behavioral task
behavioral1
Sample
0887152f919c2571edb295f19263ec2a.exe
Resource
win7-20230220-en
Malware Config
Extracted
lumma
45.9.74.78
Targets
-
-
Target
0887152f919c2571edb295f19263ec2a
-
Size
279KB
-
MD5
0887152f919c2571edb295f19263ec2a
-
SHA1
6e7fda80403a379854ee856081cf4a8c861ac23f
-
SHA256
3e1a586aee70f56e14dc8ab2b9091723390db161f48e99d2cb225c48c4db7027
-
SHA512
4f93c726a9b7ceb1770d5c8caea97f7637ef25c7a05231e2f282655d792c8ce1cb91b45118c85376e83742c6eef74b8809d91b174e83bf85983aa7c81e471b86
-
SSDEEP
6144:7q0+dl26TjTpoCFcXnzsVeWQqU5dv9kLmnupOAI+:7qlhTpnqXnQVQq6dv9kLmupBR
-
Detect Lumma Stealer payload V2
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext
-