General

  • Target

    f99da706c2b5ef8f0dfdd882b.exe

  • Size

    379KB

  • Sample

    230711-tzkl4aah7s

  • MD5

    f99da706c2b5ef8f0dfdd882bcd31bae

  • SHA1

    f13c62665f2aaec4c82bbfba164024cdaf26cb7a

  • SHA256

    2dc0f50fa7eb53be17b578fbcb66a5ec8c40d250fd9be7b2b96663624fa4dba8

  • SHA512

    e01e83d352483d937034890effb404f6950aa6612bc6012ab88bd653a33d908300ff566c0c06d999f7470f52f3de91e0ba0255b5eaf1d9bf2786ad7940268bd9

  • SSDEEP

    6144:kL8fg4jqNKUnLsY/T3/D7nNqn9PBSIUAg5+Dzr+5jCkpLWb78LVGd:koLqNKID/TP/NopRUAg8DG52kgoRGd

Malware Config

Targets

    • Target

      f99da706c2b5ef8f0dfdd882b.exe

    • Size

      379KB

    • MD5

      f99da706c2b5ef8f0dfdd882bcd31bae

    • SHA1

      f13c62665f2aaec4c82bbfba164024cdaf26cb7a

    • SHA256

      2dc0f50fa7eb53be17b578fbcb66a5ec8c40d250fd9be7b2b96663624fa4dba8

    • SHA512

      e01e83d352483d937034890effb404f6950aa6612bc6012ab88bd653a33d908300ff566c0c06d999f7470f52f3de91e0ba0255b5eaf1d9bf2786ad7940268bd9

    • SSDEEP

      6144:kL8fg4jqNKUnLsY/T3/D7nNqn9PBSIUAg5+Dzr+5jCkpLWb78LVGd:koLqNKID/TP/NopRUAg8DG52kgoRGd

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks