General

  • Target

    Satınalma siparişi ve numuneler.exe

  • Size

    403KB

  • Sample

    230719-p3284aff3y

  • MD5

    92dc3bfc98f9d448b015125231f3bd6a

  • SHA1

    57e2cbcfa3293069c7f8058fd70bb160797fce91

  • SHA256

    a58b87f315fd77116edce2744e443d0ce6bab9e087a2ead50626e986314f949e

  • SHA512

    425c6d4c90da3d05206b7fa6f2343d9231232f5862b65ba03979231beafb0ceec2cad4873499a72a6470384e73bd527f556debb7219a8d0b12929a027f205f47

  • SSDEEP

    12288:wxqsuSw7uDI0N5o+RwIwZpaBcbT4DW9l:w5w6z5PRw9i+oD

Malware Config

Targets

    • Target

      Satınalma siparişi ve numuneler.exe

    • Size

      403KB

    • MD5

      92dc3bfc98f9d448b015125231f3bd6a

    • SHA1

      57e2cbcfa3293069c7f8058fd70bb160797fce91

    • SHA256

      a58b87f315fd77116edce2744e443d0ce6bab9e087a2ead50626e986314f949e

    • SHA512

      425c6d4c90da3d05206b7fa6f2343d9231232f5862b65ba03979231beafb0ceec2cad4873499a72a6470384e73bd527f556debb7219a8d0b12929a027f205f47

    • SSDEEP

      12288:wxqsuSw7uDI0N5o+RwIwZpaBcbT4DW9l:w5w6z5PRw9i+oD

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks