Overview

overview

10

Static

static

3

173d9aaaa9...1e.exe

windows7-x64

10

173d9aaaa9...1e.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    173d9aaaa9a62a689354ab9fc47c051e.exe

  • Size

    14.3MB

  • Sample

    231126-f11g2sfc4x

  • MD5

    173d9aaaa9a62a689354ab9fc47c051e

  • SHA1

    5adc6972ca669eba979982b88db216b4d11a264b

  • SHA256

    c2c2d2f8153ffade74c03bee326711a603e1dd8de071b5b0ab63e40fd1d40a2f

  • SHA512

    b088a289a5e9212e748c1c47c70ab414515893aff857b9e1baf797d6e7d36baeb164d40eb822e3908bf7d6b5c77d1db188a61cdf524dc8fa9b52db4166a743fc

  • SSDEEP

    98304:8qNld11RlyRzM7hNNxFk9kBCxBA7llFlaDyjClzmEmoGBc0jxozQ:8/J27F4A7eDykmoGqhzQ

Score
10/10
lummaspywarestealer

Malware Config

Targets

    • Target

      173d9aaaa9a62a689354ab9fc47c051e.exe

    • Size

      14.3MB

    • MD5

      173d9aaaa9a62a689354ab9fc47c051e

    • SHA1

      5adc6972ca669eba979982b88db216b4d11a264b

    • SHA256

      c2c2d2f8153ffade74c03bee326711a603e1dd8de071b5b0ab63e40fd1d40a2f

    • SHA512

      b088a289a5e9212e748c1c47c70ab414515893aff857b9e1baf797d6e7d36baeb164d40eb822e3908bf7d6b5c77d1db188a61cdf524dc8fa9b52db4166a743fc

    • SSDEEP

      98304:8qNld11RlyRzM7hNNxFk9kBCxBA7llFlaDyjClzmEmoGBc0jxozQ:8/J27F4A7eDykmoGqhzQ

    Score
    10/10
    lummaspywarestealer

    • Detect Lumma Stealer payload V2

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks