Analysis

  • max time kernel
    151s
  • max time network
    323s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31-12-2023 02:04

General

  • Target

    сентябрь 2023(570)/00053bf64ec3040b73c84979799768dba9a03c5f0d2f73512977c7030e29dd49.exe

  • Size

    652KB

  • MD5

    50d3fe24b4b57469167b40234893b668

  • SHA1

    8daa76666366781a4c057a0c6191bdf97d9277d7

  • SHA256

    00053bf64ec3040b73c84979799768dba9a03c5f0d2f73512977c7030e29dd49

  • SHA512

    e61ab6648a1fcd2aea2bb645d5de2e6a921e7630af8929b7d48fb61a9f4e6c7aa6e1af0a0efab16a957c421ebb5a8637ada193da346f3f02d2a83c5fe89c0b2a

  • SSDEEP

    12288:7Zg188alukx+SVnDkzvkzaNasKbk9ma8lE4JSWj0k0Bupjeeeeeeeeeeieeeeee3:7SpatVngzvkiQaEzkB6MxF

Score
10/10

Malware Config

Signatures

  • Detect Lumma Stealer payload V4 2 IoCs
  • Lumma Stealer

    An infostealer written in C++ first seen in August 2022.

Processes

  • C:\Users\Admin\AppData\Local\Temp\сентябрь 2023(570)\00053bf64ec3040b73c84979799768dba9a03c5f0d2f73512977c7030e29dd49.exe
    "C:\Users\Admin\AppData\Local\Temp\сентябрь 2023(570)\00053bf64ec3040b73c84979799768dba9a03c5f0d2f73512977c7030e29dd49.exe"
    1⤵
      PID:5108

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/5108-0-0x0000000002830000-0x00000000028AC000-memory.dmp
      Filesize

      496KB

    • memory/5108-6-0x0000000002830000-0x00000000028AC000-memory.dmp
      Filesize

      496KB