Resubmissions

28/07/2023, 03:54

230728-egf4maca2w10

27/07/2023, 14:09

230727-rgg25sfb5510

General

  • Target
    83fb39b83f87a4f7ce15acea69642bf9929c50d8e96043a2a24166fa786c8919
  • Size 476KB
  • Sample230728-egf4maca2w
  • SHA256 83fb39b83f87a4f7ce15acea69642bf9929c50d8e96043a2a24166fa786c8919
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      83fb39b83f87a4f7ce15acea69642bf9929c50d8e96043a2a24166fa786c8919
    • Size 476KB
    • SHA256 83fb39b83f87a4f7ce15acea69642bf9929c50d8e96043a2a24166fa786c8919
    • MD5 SHA1 SHA512 SSDEEP
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks