lumma | 63bae6ef7079dc92968fe00d5adebd6488ac116f56364d776f86464fcdf08ea3

General

Target
VersionUnlimited-main.zip
Size 18.9MB
Sample230424-yvhn6aec75
SHA256 63bae6ef7079dc92968fe00d5adebd6488ac116f56364d776f86464fcdf08ea3
MD5 3c9ade4553a3f100330d242d6c78b296
SHA1 92aef2d3767ad67dbc1283774a8d57dbee571fdf
SHA512 cabc19fdedce2b49b4c12cd10572abea633bf7b985b8fb0b7c5759f77a67209c2a75236198df2871b39a5affe858952d6080e953fee20b7639ce8279862d6ef3
SSDEEP 393216:XpUkZG8oHFBAieNRcpbPnmZD6PUxeSIBLkAF:ZzZG8oHFeiiC7uDtxeSI5F
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  NewVersionUnlimited/Desktop_Full/Setup_x64.exe
- Size 689.5MB
- SHA256 7cc6d947930ba76738f80c8173482f9c7aa72b967af6504ea437c4b9c734602a
- MD5 70de17cb6cc2d93d2315cb85c5df9e3d
- SHA1 249f6e435746f70547aa61f91b90fcbb0270eb03
- SHA512 9ee27d5ecff8653763d2a1cacd982333ca9a400619d76a4d1626a53683944f0aa053be6cb962a720eefb08e0c05eba1ff2ca3c7b0a7fea89d1b3da52786ef44c
- SSDEEP 6144:YB1ySr9qqgdLTMHiDAOEamFbh4Ck9rIjc2NtDbQRw/Kltlg1wlvt:YBjr9qqcR8Fbh4xIjxNNbW6Ky1Yvt
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

lumma spyware stealer
- Lumma Stealer
  An infostealer written in C++ first seen in August 2022.
  stealer lumma
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Suspicious use of SetThreadContext
behavioral1 behavioral2
- Target
  NewVersionUnlimited/Desktop_Full/modules.dll
- Size 907KB
- SHA256 37ec5f998a5c376d4fcd4342b43a4163d1f043e0f7711e46677cd30013882723
- MD5 dc05f0b8f1a32e872721d3486e6332b8
- SHA1 dbf055b0f934640fadcfaa93971fead8df7a3869
- SHA512 0f89d713237ef11a1ef8d824ad9767bb13fb4f5f334acdd65af0ba6e54cec4a910398636683254b3fe4d46a069a1781187313684ff827a907b8b968134f6efa0
- SSDEEP 24576:z0OY4ZFajHYDTR2yfVbf+c6Z5WODYsHh6g3P0zAk75:z0CZFaj4HR2yfVbd6Z5WODYsHh6g3P03
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral3 behavioral4
- Target
  NewVersionUnlimited/Desktop_Full/platforms/qwindows.dll
- Size 1.4MB
- SHA256 1fa4d2f13d22d9a859503d7b7c87ba39d379d9a14afcea7299d572eabb2bdf57
- MD5 ac584cbeb327e9d2364873f451e074be
- SHA1 eb2d7b7f38c880ae4bc4f32c50e10e73ee15c816
- SHA512 4fca1fa9494799f382318d329a3040bc067d55e7cd99be6d768e975fb585f61f8c1360908284bb04c055dcf21a164464305e9255d52b1c57a0cfc49eea003203
- SSDEEP 24576:X/JCM63NAI9HwxZ3tVuItJKLOlxrbzxTbhE3Yd3ZAX2NyX:XxlAL9Hw73aItqOPDxPUY4X
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1

T1081

Discovery

Lateral Movement

Collection

Data from Local System

1

T1005

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Lumma Stealer

Accesses cryptocurrency files/wallets, possible credential harvesting

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6