General

  • Target

    a70c2312cafe5add83acd3619666e284

  • Size

    66KB

  • Sample

    240226-w7k9psde31

  • MD5

    a70c2312cafe5add83acd3619666e284

  • SHA1

    aa2a63982d0fbf1712601780077cf839aa6b09b2

  • SHA256

    ee2f65543cd62f1098284edec484b3ca13077ea32f9b7564e2b8d205309a257a

  • SHA512

    38c6f8ca0fc2551e4b5698eb5f3a7d11d3c751befbc1271be307a56a28a1cdf4a1a02fc9b641a45245f1f0cb5e173002c777951105b0ce3e4643d9aa21cfdfce

  • SSDEEP

    1536:+mPFffLBVOlD6+eVzm5c8AC6bfU8Z13OkT//0BYs2:VfGs+a1nC6bfpZ13OwHSYs2

Score
10/10

Malware Config

Targets

    • Target

      a70c2312cafe5add83acd3619666e284

    • Size

      66KB

    • MD5

      a70c2312cafe5add83acd3619666e284

    • SHA1

      aa2a63982d0fbf1712601780077cf839aa6b09b2

    • SHA256

      ee2f65543cd62f1098284edec484b3ca13077ea32f9b7564e2b8d205309a257a

    • SHA512

      38c6f8ca0fc2551e4b5698eb5f3a7d11d3c751befbc1271be307a56a28a1cdf4a1a02fc9b641a45245f1f0cb5e173002c777951105b0ce3e4643d9aa21cfdfce

    • SSDEEP

      1536:+mPFffLBVOlD6+eVzm5c8AC6bfU8Z13OkT//0BYs2:VfGs+a1nC6bfpZ13OwHSYs2

    Score
    10/10
    • Detect Lumma Stealer payload V4

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Looks for VMWare Tools registry key

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks