lumma | 95909edd6bba0c81f791e457a11ed8260ac456d1f7c024112832ffe95d7e13ce | Triage

Submit
Reports

Overview

overview

Static

static

3

0579bb2980...35.exe

windows7-x64

0579bb2980...35.exe

windows10-2004-x64

Sharing

General

Target

0579bb2980b6b30923360840edb34f35
Size

172KB
Sample

231229-19g3aachgk
MD5

0579bb2980b6b30923360840edb34f35
SHA1

57195a93089f1be4c988c12bbbed9dd91c74fa85
SHA256

95909edd6bba0c81f791e457a11ed8260ac456d1f7c024112832ffe95d7e13ce
SHA512

25d271ea1258ae691e82bb952ba6285ef4aa84c2d7269dd3783bc41bcc9b492150f999d98b1cdf77bda74732c5e40879ba34a0c302fbad1bed2289fa8a9eec15
SSDEEP

3072:WRPcQXh2sISl4u68rFCwcLJZmWLmYIMFYvHmwG7ADBUunrfyP0rwzGlGaSC:Gkk5IS68rFUmVMKvGw4urfysQC

Score

10^/10

lumma evasion stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

0579bb2980b6b30923360840edb34f35.exe

Resource

win7-20231215-en

lumma evasion stealer

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

0579bb2980b6b30923360840edb34f35.exe

Resource

win10v2004-20231215-en

lumma evasion stealer

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  0579bb2980b6b30923360840edb34f35
- Size
  
  172KB
- MD5
  
  0579bb2980b6b30923360840edb34f35
- SHA1
  
  57195a93089f1be4c988c12bbbed9dd91c74fa85
- SHA256
  
  95909edd6bba0c81f791e457a11ed8260ac456d1f7c024112832ffe95d7e13ce
- SHA512
  
  25d271ea1258ae691e82bb952ba6285ef4aa84c2d7269dd3783bc41bcc9b492150f999d98b1cdf77bda74732c5e40879ba34a0c302fbad1bed2289fa8a9eec15
- SSDEEP
  
  3072:WRPcQXh2sISl4u68rFCwcLJZmWLmYIMFYvHmwG7ADBUunrfyP0rwzGlGaSC:Gkk5IS68rFUmVMKvGw4urfysQC
Score

10^/10

lumma evasion stealer
- Detect Lumma Stealer payload V4
- Lumma Stealer
  An infostealer written in C++ first seen in August 2022.
  stealer lumma
- Modifies security service
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

lummaevasionstealer

behavioral2

lummaevasionstealer

© 2018-2024

Terms | Privacy