Analysis
-
max time kernel
147s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
07-01-2024 18:26
General
-
Target
Samples 1/2a6e81706ec02af2afc1254ac19dcf89203bc0cefd6d6df5cf57cd9c70526c6c.exe
-
Size
4.9MB
-
MD5
f81a0abe9131fdd7a1d535dbab8e5451
-
SHA1
3226bdbf0df5318609c7fd03453aa5c97636d89a
-
SHA256
2a6e81706ec02af2afc1254ac19dcf89203bc0cefd6d6df5cf57cd9c70526c6c
-
SHA512
7adf59348b9846406b89a3d497a6e92e565ed5ad5fbba1af22b427fb12d76980e18f33b7b39ac0ac0c0becc28fac603795fc427dd2c2ddaca1ff736e10531f96
-
SSDEEP
98304:7hgMyAGrNbegrraSASKPZml0Vq2t0NLUgja3onb+Yi8Omh:NgMyACpDranrXUfNLtAbY4mh
Score
10/10
Malware Config
Signatures
-
Detect Lumma Stealer payload V4 3 IoCs
-
Lumma Stealer
An infostealer written in C++ first seen in August 2022.
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Samples 1\2a6e81706ec02af2afc1254ac19dcf89203bc0cefd6d6df5cf57cd9c70526c6c.exe"C:\Users\Admin\AppData\Local\Temp\Samples 1\2a6e81706ec02af2afc1254ac19dcf89203bc0cefd6d6df5cf57cd9c70526c6c.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4148-2-0x0000000000CF0000-0x0000000001552000-memory.dmpFilesize
8.4MB
-
memory/4148-1-0x00000000015D0000-0x00000000015D1000-memory.dmpFilesize
4KB
-
memory/4148-5-0x0000000000CF0000-0x0000000001552000-memory.dmpFilesize
8.4MB
-
memory/4148-7-0x0000000003530000-0x0000000003531000-memory.dmpFilesize
4KB
-
memory/4148-6-0x0000000003520000-0x0000000003521000-memory.dmpFilesize
4KB
-
memory/4148-4-0x0000000003510000-0x0000000003511000-memory.dmpFilesize
4KB
-
memory/4148-3-0x00000000015E0000-0x00000000015E1000-memory.dmpFilesize
4KB
-
memory/4148-0-0x00000000015B0000-0x00000000015B1000-memory.dmpFilesize
4KB
-
memory/4148-11-0x0000000000CF0000-0x0000000001552000-memory.dmpFilesize
8.4MB