lumma | 13d7cc6a5df210830f6470d4412ea16159f25d4285cd9e76b92bc04d722d2d64 | Triage

Sharing

General

Target

6b531de6f2cf065a71df26dd1a83b395
Size

905KB
Sample

231226-nrfqaafac9
MD5

6b531de6f2cf065a71df26dd1a83b395
SHA1

d4084c7df91751e4693b8daee1115573b2a1ea81
SHA256

13d7cc6a5df210830f6470d4412ea16159f25d4285cd9e76b92bc04d722d2d64
SHA512

c95f0c46a2d7fac057d0559c57ec1367274b299f0feb15e2d125b861ee49a0b66c36de8b56cde4cb4f5e10df543d03694d99f58a823bdef96ab10b21f998d3f9
SSDEEP

12288:sB0uRsxZAxhMarNu1n5gs0xJ26qF1ca36c9U:s6UsxihMr15gsQf2Xqc

Score

10^/10

lumma evasion stealer

Malware Config

Targets

- Target
  
  6b531de6f2cf065a71df26dd1a83b395
- Size
  
  905KB
- MD5
  
  6b531de6f2cf065a71df26dd1a83b395
- SHA1
  
  d4084c7df91751e4693b8daee1115573b2a1ea81
- SHA256
  
  13d7cc6a5df210830f6470d4412ea16159f25d4285cd9e76b92bc04d722d2d64
- SHA512
  
  c95f0c46a2d7fac057d0559c57ec1367274b299f0feb15e2d125b861ee49a0b66c36de8b56cde4cb4f5e10df543d03694d99f58a823bdef96ab10b21f998d3f9
- SSDEEP
  
  12288:sB0uRsxZAxhMarNu1n5gs0xJ26qF1ca36c9U:s6UsxihMr15gsQf2Xqc
Score

10^/10

lumma evasion stealer
- Detect Lumma Stealer payload V4
- Lumma Stealer
  An infostealer written in C++ first seen in August 2022.
  stealer lumma
- Modifies security service
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

lummaevasionstealer

behavioral2