lumma | LummaC2[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
LummaC2.exe
Size 391KB
Sample230726-qcqcaacc21
SHA256 d5998de73a2e6ac2fafe81270e33b6a9fd8cef605cb56603456029b8b598c077
MD5 16f2d0aa122b49bd7f7ca17eb28e5df5
SHA1 ade62b2a58d4aa6972283cd000a51fe3ff0885e8
SHA512 a5619c43463f45414c04de711cb8daa20bad433f494b6912db27eeb632a6f42669893a7f85acfa24171560581febe548757fec005b2968460d0486c097a9d55c
SSDEEP 12288:alJxRPSvnEVL9MtT6Mgzwni786xNPB8bKbb:altSS9M56Mgz3BxNZt
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

lumma

Malware Config

Signatures

Lumma family
lumma

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LummaC2.exe

File Explorer

LummaC2.exe

.exe 391KB

LummaC2.exe

IMPHASH 67ce5c1f8081cdf08e5f30c58a340ff6
SHA256 d5998de73a2e6ac2fafe81270e33b6a9fd8cef605cb56603456029b8b598c077
MD5 16f2d0aa122b49bd7f7ca17eb28e5df5
SHA1 ade62b2a58d4aa6972283cd000a51fe3ff0885e8
SHA512 a5619c43463f45414c04de711cb8daa20bad433f494b6912db27eeb632a6f42669893a7f85acfa24171560581febe548757fec005b2968460d0486c097a9d55c
SSDEEP 12288:alJxRPSvnEVL9MtT6Mgzwni786xNPB8bKbb:altSS9M56Mgz3BxNZt
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

207692

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle CompareStringW CreateDirectoryW CreateFileA CreateFileW CreateProcessW DecodePointer DeleteCriticalSection DeleteFileW EncodePointer EnterCriticalSection ExitProcess ExpandEnvironmentStringsW FileTimeToSystemTime FindClose FindFirstFileExW FindNextFileW FlushFileBuffers FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetComputerNameExA GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDriveTypeW GetEnvironmentStringsW GetFileInformationByHandle GetFileSizeEx GetFileType GetFullPathNameW GetLastError GetModuleFileNameA GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemTimeAsFileTime GetTimeZoneInformation HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryExW LoadLibraryW MultiByteToWideChar PeekNamedPipe QueryPerformanceCounter RaiseException ReadConsoleW ReadFile RtlUnwind SetEndOfFile SetEnvironmentVariableW SetFilePointerEx SetFileTime SetLastError SetStdHandle SetUnhandledExceptionFilter SystemTimeToFileTime SystemTimeToTzSpecificLocalTime TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TzSpecificLocalTimeToSystemTime UnhandledExceptionFilter WideCharToMultiByte WinExec WriteConsoleW WriteFile lstrcatW lstrcmpW lstrcmpiW lstrlenW

user32

EnumDisplayDevicesA GetDC GetDesktopWindow GetSystemMetrics ReleaseDC SystemParametersInfoW wsprintfW

gdi32

BitBlt CreateCompatibleBitmap CreateCompatibleDC CreateDCW DeleteDC DeleteObject GetDIBits GetObjectW SelectObject

advapi32

RegCloseKey RegEnumKeyExW RegOpenKeyExW RegQueryValueExW

winhttp

WinHttpCloseHandle WinHttpConnect WinHttpCrackUrl WinHttpOpen WinHttpOpenRequest WinHttpQueryDataAvailable WinHttpReadData WinHttpReceiveResponse WinHttpSendRequest

wininet

InternetQueryDataAvailable InternetReadFile

crypt32

CryptStringToBinaryA