Analysis
-
max time kernel
93s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
-
submitted
23-02-2024 03:32
General
-
Target
valoskin/spoofer.exe
-
Size
425KB
-
MD5
168d7b4ca5c63b61d5f48f0911868b2c
-
SHA1
daf966bd0ac55c862ce5574ee7d5420123ac94e4
-
SHA256
601c05bd2d1c908d123dac33d1c15552c138acb294124cbdd86b12c9f35e2655
-
SHA512
da5ebb40849fedafc5a3ac7c48a0142c6eb5ccefe788b6c07491a757aa9e9b4f3d8b76e1dacf0600a833aade05c309b9661e8fd40080d4ba8f4cf4ea3d59900f
-
SSDEEP
12288:jLJ/KPJxO9j7MIFyKz3mBEP5KpPbDC0dGhKcYtmS2:jcPYsIUOwtb1whlt
Score
10/10
Malware Config
Extracted
Family
lumma
C2
https://technologyenterdo.shop/api
https://detectordiscusser.shop/api
https://turkeyunlikelyofw.shop/api
https://associationokeo.shop/api
Signatures
-
Lumma Stealer
An infostealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\valoskin\spoofer.exe"C:\Users\Admin\AppData\Local\Temp\valoskin\spoofer.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
292KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
292KB