Overview

overview

10

Static

static

1

GALATICsetup (2).exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    GALATICsetup (2).exe

  • Size

    49.6MB

  • Sample

    230331-p4lmqsba3x

  • MD5

    14bfc21e2f49e1b9a804fb65c75681c6

  • SHA1

    5e8ab9b11f170451865b4d47f3f833717d3386ae

  • SHA256

    e2a3f0e0a351118edcdc42d43f11a7218e1f2d9227bddec104f47d1f069208d0

  • SHA512

    dcecdbdd475f28cb96b4f194b569644152f08b241cd3f571b04f4a8c2defeae8bcfbf1162474e91becec579df6f338bc9fa3612567df770a182ecfa45560816a

  • SSDEEP

    786432:Icv1fchJaQ8JsK/8bPbNEPDEIH453obWe+tmVae8jq5Mj2Vg2S62FxxK+vT4zOtD:jJ3sREPDEoUob5+7zis2Ot7

Score
10/10
lummastealer

Malware Config

Targets

    • Target

      GALATICsetup (2).exe

    • Size

      49.6MB

    • MD5

      14bfc21e2f49e1b9a804fb65c75681c6

    • SHA1

      5e8ab9b11f170451865b4d47f3f833717d3386ae

    • SHA256

      e2a3f0e0a351118edcdc42d43f11a7218e1f2d9227bddec104f47d1f069208d0

    • SHA512

      dcecdbdd475f28cb96b4f194b569644152f08b241cd3f571b04f4a8c2defeae8bcfbf1162474e91becec579df6f338bc9fa3612567df770a182ecfa45560816a

    • SSDEEP

      786432:Icv1fchJaQ8JsK/8bPbNEPDEIH453obWe+tmVae8jq5Mj2Vg2S62FxxK+vT4zOtD:jJ3sREPDEoUob5+7zis2Ot7

    Score
    10/10
    lummastealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Process Discovery

1
T1057

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks