General

  • Target

    b28ab720f9d5f6a7b7ab2772f1388df7.exe

  • Size

    561KB

  • Sample

    230403-sx2xxsff26

  • MD5

    b28ab720f9d5f6a7b7ab2772f1388df7

  • SHA1

    337d6306aa49ca0274869c5b89764bab8de2268b

  • SHA256

    15f7f1e52909648e38d62c3b4dfa1f7fc62e718abe50f373a0a6a130b8031364

  • SHA512

    22ad02709870efd747c6e2d4cbc864dd0164a5c0e4641cd3c5506a45b04df605e082169b1745b9726c286c3f5f3cde22de4ede5bf4e1f6b13551fa16a8e8dc58

  • SSDEEP

    12288:4aPLO3f1VaE9tLkrDnBEpBbsICyPH/z4RiunKdX1SjGSG:4aPLO3dVZsPKplHzciBd0i

Malware Config

Targets

    • Target

      b28ab720f9d5f6a7b7ab2772f1388df7.exe

    • Size

      561KB

    • MD5

      b28ab720f9d5f6a7b7ab2772f1388df7

    • SHA1

      337d6306aa49ca0274869c5b89764bab8de2268b

    • SHA256

      15f7f1e52909648e38d62c3b4dfa1f7fc62e718abe50f373a0a6a130b8031364

    • SHA512

      22ad02709870efd747c6e2d4cbc864dd0164a5c0e4641cd3c5506a45b04df605e082169b1745b9726c286c3f5f3cde22de4ede5bf4e1f6b13551fa16a8e8dc58

    • SSDEEP

      12288:4aPLO3f1VaE9tLkrDnBEpBbsICyPH/z4RiunKdX1SjGSG:4aPLO3dVZsPKplHzciBd0i

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks