lumma | LummaC2-corps[.]exe[.]bin

General

Target
LummaC2-corps.exe.bin
Size 161KB
Sample230430-18aa2seb68
SHA256 0f40b111497b78b928a42f3c4f2e0c988be7ee5b3b0d523300685b75a2aadf06
MD5 1e085b39d5dae93c6f5e6f4ef31e211e
SHA1 57bfc8d183a4b6a1f6391e6acb02a14ed269ae83
SHA512 c57094fd3c67312f710037f844e2b3bc86e2ea353dbfb53c7351a98672780c921c498c4167588f9d6f809a2aecf8d568f8fea4a6c7eaabe4e1cd3a6bfbaba592
SSDEEP 3072:Cg1pLWxSFGEPS573hJSt3J0UskElaB+NgXCJxNThkOvVVa+0tbL12SO+Ou2:dpFGIGraOa/ex1hkgVRru2
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

lumma

Malware Config

Signatures

Detect Lumma Stealer payload V2 1 IoCs

resource	yara_rule
sample	family_lumma_V2

Lumma family
lumma

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LummaC2-corps.exe.bin

File Explorer

LummaC2-corps.exe.bin

.exe 161KB

LummaC2-corps.exe.bin

IMPHASH 6267ae8615795a0e822c6b0f2fdc6338
SHA256 0f40b111497b78b928a42f3c4f2e0c988be7ee5b3b0d523300685b75a2aadf06
MD5 1e085b39d5dae93c6f5e6f4ef31e211e
SHA1 57bfc8d183a4b6a1f6391e6acb02a14ed269ae83
SHA512 c57094fd3c67312f710037f844e2b3bc86e2ea353dbfb53c7351a98672780c921c498c4167588f9d6f809a2aecf8d568f8fea4a6c7eaabe4e1cd3a6bfbaba592
SSDEEP 3072:Cg1pLWxSFGEPS573hJSt3J0UskElaB+NgXCJxNThkOvVVa+0tbL12SO+Ou2:dpFGIGraOa/ex1hkgVRru2
MD5 SHA1 SHA512 SSDEEP

windows x86

Detect Lumma Stealer payload V2
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

37112

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcatW lstrlenW lstrcmpW MultiByteToWideChar WideCharToMultiByte ReadFile HeapFree GetCurrentProcess Wow64DisableWow64FsRedirection CreateFileW Wow64RevertWow64FsRedirection CloseHandle GetNativeSystemInfo HeapAlloc GetFileSize GetProcessHeap lstrcmpiW WriteConsoleW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException SetEndOfFile GetFileType GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW SetFilePointerEx GetConsoleMode SetStdHandle GetConsoleOutputCP CompareStringW LCMapStringW GetTimeZoneInformation FlushFileBuffers HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetStringTypeW HeapSize DecodePointer

Sharing