Resubmissions

30/04/2023, 15:52

230430-ta7qbsca3s 10

01/02/2023, 14:45

230201-r4xq4sab44 7

General

  • Target

    81b16b8e152322da3b81e7703e430c77d3f06e53b0ba24a5a82e0c3e371c9a21

  • Size

    181KB

  • Sample

    230430-ta7qbsca3s

  • MD5

    16685b20847f33924fb8d849229c41f0

  • SHA1

    c37f16cecc342c1f9361a759c1f232f069a8fba6

  • SHA256

    81b16b8e152322da3b81e7703e430c77d3f06e53b0ba24a5a82e0c3e371c9a21

  • SHA512

    ee00442f939e617893c57cefba4b2e82fabef7d75d6e980daeb4528a40e639404375e4e1b21e2a0136e627a1f13d0a314ed7fdce9e29e20ba4a415bf3b0bb6bb

  • SSDEEP

    3072:5BnBuDhmb9H7V1oVt3J1HsgujusEAqFlxM7bYyaAWxLYWG21N41AnLPW2A5kVXDO:fADwHqdskF28AWhYWX1NoAn51o

Malware Config

Extracted

Family

lumma

C2

77.73.134.68

Targets

    • Target

      81b16b8e152322da3b81e7703e430c77d3f06e53b0ba24a5a82e0c3e371c9a21

    • Size

      181KB

    • MD5

      16685b20847f33924fb8d849229c41f0

    • SHA1

      c37f16cecc342c1f9361a759c1f232f069a8fba6

    • SHA256

      81b16b8e152322da3b81e7703e430c77d3f06e53b0ba24a5a82e0c3e371c9a21

    • SHA512

      ee00442f939e617893c57cefba4b2e82fabef7d75d6e980daeb4528a40e639404375e4e1b21e2a0136e627a1f13d0a314ed7fdce9e29e20ba4a415bf3b0bb6bb

    • SSDEEP

      3072:5BnBuDhmb9H7V1oVt3J1HsgujusEAqFlxM7bYyaAWxLYWG21N41AnLPW2A5kVXDO:fADwHqdskF28AWhYWX1NoAn51o

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks