Overview

overview

10

Static

static

3

d8b6bf6b66...02.exe

windows7-x64

6

d8b6bf6b66...02.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d8b6bf6b66f9db15567b43e5b725a2cd5fa74854f4b2e715f58ee6ae44488f02.exe

  • Size

    1.5MB

  • Sample

    231126-qllqfshe6x

  • MD5

    c0495cb1e372a65254ddaf43736cadff

  • SHA1

    a51ac30d1719516dfe5c93a35600de04ca467b1a

  • SHA256

    d8b6bf6b66f9db15567b43e5b725a2cd5fa74854f4b2e715f58ee6ae44488f02

  • SHA512

    0888ac46ca6329e5d7d53c5dfd4a65c98ea58daa48423dddd5c1658dfe7240a2a733dec0f34493a229bc0197134bab132dbebce2d4f9ffe4186d79f7db9163d4

  • SSDEEP

    24576:/spUqF2JAwTDWLGf7ROqn2qepppWuedVrB/TI8beGQKM1:/awPWLGf7MqnEpuTVrdk8bHRM1

Score
10/10
lummaspywarestealer

Malware Config

Targets

    • Target

      d8b6bf6b66f9db15567b43e5b725a2cd5fa74854f4b2e715f58ee6ae44488f02.exe

    • Size

      1.5MB

    • MD5

      c0495cb1e372a65254ddaf43736cadff

    • SHA1

      a51ac30d1719516dfe5c93a35600de04ca467b1a

    • SHA256

      d8b6bf6b66f9db15567b43e5b725a2cd5fa74854f4b2e715f58ee6ae44488f02

    • SHA512

      0888ac46ca6329e5d7d53c5dfd4a65c98ea58daa48423dddd5c1658dfe7240a2a733dec0f34493a229bc0197134bab132dbebce2d4f9ffe4186d79f7db9163d4

    • SSDEEP

      24576:/spUqF2JAwTDWLGf7ROqn2qepppWuedVrB/TI8beGQKM1:/awPWLGf7MqnEpuTVrdk8bHRM1

    Score
    10/10
    spywarelummastealer

    • Detect Lumma Stealer payload V2

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks