lumma | sample[.]exe

General

Target
sample.exe
Size 179KB
Sample230424-q4f8pacb66
SHA256 d18a31b0b3d20a86fc0647d7f47332d648499d52eee68d34857eec61f3b042ce
MD5 17a9e53240082bd288d35b02986769a0
SHA1 72d12b8cbb5bcbe3c6991c4a36c83bee36faeecb
SHA512 83cda2d6ad54e3155faa909bed359742e5bfba7341456a559301c4f9826d18be8c17ebd5286590d5e67ed931db6b08d16e135ea96ed8da6060818bf554aee3b4
SSDEEP 3072:FzES61an+OJHwoRtO/tmJQDFoWTlfUwOXVK/mOJdtOQbj7DG3OybUTywhjucYKng:FzlBHwoREuGcVMmOHkKD3yITrjucYKng
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

lumma

Malware Config

Extracted

Family

lumma

C2

77.73.134.68

Signatures

Detect Lumma Stealer payload V2 1 IoCs

resource	yara_rule
sample	family_lumma_V2

Lumma family
lumma

File Explorer

sample.exe

.exe 179KB

sample.exe

IMPHASH 27dbb88b488283efc96b2981fc8fb6d5
SHA256 d18a31b0b3d20a86fc0647d7f47332d648499d52eee68d34857eec61f3b042ce
MD5 17a9e53240082bd288d35b02986769a0
SHA1 72d12b8cbb5bcbe3c6991c4a36c83bee36faeecb
SHA512 83cda2d6ad54e3155faa909bed359742e5bfba7341456a559301c4f9826d18be8c17ebd5286590d5e67ed931db6b08d16e135ea96ed8da6060818bf554aee3b4
SSDEEP 3072:FzES61an+OJHwoRtO/tmJQDFoWTlfUwOXVK/mOJdtOQbj7DG3OybUTywhjucYKng:FzlBHwoREuGcVMmOHkKD3yITrjucYKng
MD5 SHA1 SHA512 SSDEEP

windows x86

Detect Lumma Stealer payload V2

Minor OS version

Major OS version

Entry point

37036

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcmpiW WriteConsoleW HeapSize SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA CloseHandle CreateFileW GetCurrentProcess GetProcessHeap HeapAlloc WideCharToMultiByte HeapFree MultiByteToWideChar lstrcmpW lstrlenW GetStringTypeW lstrcatW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException SetEndOfFile GetFileType GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW SetFilePointerEx GetConsoleMode SetStdHandle GetConsoleCP CompareStringW LCMapStringW GetTimeZoneInformation FlushFileBuffers HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo DecodePointer

user32

GetSystemMetrics EnumDisplayDevicesA ReleaseDC wsprintfW GetDC

gdi32

BitBlt CreateCompatibleBitmap SelectObject CreateCompatibleDC CreateDCW GetDIBits DeleteDC GetObjectW DeleteObject

advapi32

RegEnumKeyExW RegOpenKeyExW RegQueryValueExW RegCloseKey

Sharing