Analysis

  • max time kernel
    195s
  • max time network
    300s
  • platform
    windows10-1703_x64
  • resource
    win10-20240221-en
  • resource tags

    arch:x64arch:x86image:win10-20240221-enlocale:en-usos:windows10-1703-x64system
  • submitted
    27-02-2024 04:51

General

  • Target

    d02a1d9bb677dba25254aaac415b8f43e91d0bee4d3a26748c61f87fc5b3ada6.exe

  • Size

    275KB

  • MD5

    ee8940bc2a47d26bdcd3347815f03117

  • SHA1

    22a02bf284ea145bba0535dd33c48214995e71d5

  • SHA256

    d02a1d9bb677dba25254aaac415b8f43e91d0bee4d3a26748c61f87fc5b3ada6

  • SHA512

    eed51379e48cfb13f7ed48b4e2d47951f6c6ed49841b18ba3b92d0f5872f741d201ea539de9542f4333276a8c54672bd60505ab57d89bc3f1f54caade02e126c

  • SSDEEP

    6144:J4t+SZX4A49Y8b5+lsdiyDujTyJtCoV5Rxl4eO:J8+SVtsgy6jTKthV5RH

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://associationokeo.shop/api

https://technologyenterdo.shop/api

https://detectordiscusser.shop/api

https://turkeyunlikelyofw.shop/api

Signatures

  • Lumma Stealer

    An infostealer written in C++ first seen in August 2022.

Processes

  • C:\Users\Admin\AppData\Local\Temp\d02a1d9bb677dba25254aaac415b8f43e91d0bee4d3a26748c61f87fc5b3ada6.exe
    "C:\Users\Admin\AppData\Local\Temp\d02a1d9bb677dba25254aaac415b8f43e91d0bee4d3a26748c61f87fc5b3ada6.exe"
    1⤵
      PID:2188

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2188-1-0x0000000002500000-0x0000000002600000-memory.dmp

      Filesize

      1024KB

    • memory/2188-4-0x0000000002430000-0x0000000002431000-memory.dmp

      Filesize

      4KB

    • memory/2188-3-0x0000000002470000-0x00000000024B6000-memory.dmp

      Filesize

      280KB

    • memory/2188-2-0x0000000002470000-0x00000000024B6000-memory.dmp

      Filesize

      280KB

    • memory/2188-5-0x0000000000400000-0x00000000022ED000-memory.dmp

      Filesize

      30.9MB