Overview

overview

10

Static

static

7

515006e6ee...29.exe

windows7-x64

10

515006e6ee...29.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1bcd409bc9efcd48dfbc3dbd26e0071c.bin

  • Size

    1.3MB

  • Sample

    230722-bddybahg6x

  • MD5

    e728189524b8ff97d9ff07db296a5c3a

  • SHA1

    7f83431011af1814bba03579060d3af77bea4c55

  • SHA256

    c3a3c1a964e108919e3217614ac4754fa9f4cf37f370019645aaa277547bf372

  • SHA512

    6477ef036e002e2cf5748bfcfa890f09926c116a45eb6c87e050ae38b0b502fb3f0023ad3f45ec3ed6a082b0c93e70572c583123db98efb39dba9cce6c31530c

  • SSDEEP

    24576:LJE5A2w1CSQ8i/1BjVyVXKNeaHH14HThWbpC+qwtJFUYREvPQZ:LJEsI8E1+XaeE+ThWbsrGUYR2O

Score
10/10
lummastealer

Malware Config

Targets

    • Target

      515006e6eecad0418c6c3980a258dfc6e9f8ff8dacc801298b445c25017beb29.exe

    • Size

      1.7MB

    • MD5

      1bcd409bc9efcd48dfbc3dbd26e0071c

    • SHA1

      063c673744ab5787e0087b6602332d8f7a07e039

    • SHA256

      515006e6eecad0418c6c3980a258dfc6e9f8ff8dacc801298b445c25017beb29

    • SHA512

      257865a38693000563ee898b960ca41623b51136c786f7346de578d8c8647bfddf912fce44dcbfcdb9406e3a8f75ac36f05b3ccfe14d5f2f51f5097e02f1ed96

    • SSDEEP

      24576:9Kk8YxJl1W4vfJnQBYxtbcR556Zcsn4slE83RwXXasZe3+yqkqBLU:0YxYkpQKQRuZccZJBwXXasZs+BkMLU

    Score
    10/10
    lummastealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks