Overview

overview

10

Static

static

3

ab236f72d9...63.exe

windows7-x64

10

ab236f72d9...63.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    ab236f72d954d59740bc0e8385648363
  • Size 102KB
  • Sample240228-gdfpsscf22
  • SHA256 7f13e384f8471ee8a3fb31e09ecb312e273fe57cd825a27bf67a4f7360ffa35d
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
lummametasploitbackdoorstealertrojan

Malware Config

Extracted

Family

  • metasploit

Version

  • encoder/fnstenv_mov

Targets

    • Target
      ab236f72d954d59740bc0e8385648363
    • Size 102KB
    • SHA256 7f13e384f8471ee8a3fb31e09ecb312e273fe57cd825a27bf67a4f7360ffa35d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    lummametasploitbackdoorstealertrojan

    • Detect Lumma Stealer payload V4

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks