Analysis

  • max time kernel
    193s
  • max time network
    258s
  • platform
    windows10-1703_x64
  • resource
    win10-20240221-en
  • resource tags

    arch:x64arch:x86image:win10-20240221-enlocale:en-usos:windows10-1703-x64system
  • submitted
    26/02/2024, 01:58

General

  • Target
    9af0383740fc20889f9bd51c0bdc121c87155d415a2dfdaf8d409d9e0bd4d083.exe
  • Size 335KB
  • Sample240226-cd5lpsab36
  • SHA256 9af0383740fc20889f9bd51c0bdc121c87155d415a2dfdaf8d409d9e0bd4d083
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • lumma

C2
  • https://associationokeo.shop/api

  • https://technologyenterdo.shop/api

  • https://detectordiscusser.shop/api

  • https://turkeyunlikelyofw.shop/api

Signatures

  • Lumma Stealer

    An infostealer written in C++ first seen in August 2022.

Processes

  • C:\Users\Admin\AppData\Local\Temp\9af0383740fc20889f9bd51c0bdc121c87155d415a2dfdaf8d409d9e0bd4d083.exe
    "C:\Users\Admin\AppData\Local\Temp\9af0383740fc20889f9bd51c0bdc121c87155d415a2dfdaf8d409d9e0bd4d083.exe"
    1⤵
      PID:440

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          memory/440-1-0x0000000003090000-0x0000000003190000-memory.dmp

          memory/440-2-0x0000000002E90000-0x0000000002ED6000-memory.dmp

          memory/440-3-0x0000000002EE0000-0x0000000002F20000-memory.dmp

          memory/440-4-0x0000000002EE0000-0x0000000002F20000-memory.dmp

          memory/440-6-0x0000000002EE0000-0x0000000002F20000-memory.dmp

          memory/440-5-0x0000000002EE0000-0x0000000002F20000-memory.dmp

          memory/440-7-0x0000000002EE0000-0x0000000002F20000-memory.dmp

          memory/440-8-0x0000000000400000-0x0000000002D53000-memory.dmp