Analysis

  • max time kernel
    195s
  • max time network
    297s
  • platform
    windows10-1703_x64
  • resource
    win10-20240221-en
  • resource tags

    arch:x64arch:x86image:win10-20240221-enlocale:en-usos:windows10-1703-x64system
  • submitted
    29/02/2024, 05:04

General

  • Target

    d02a1d9bb677dba25254aaac415b8f43e91d0bee4d3a26748c61f87fc5b3ada6.exe

  • Size

    275KB

  • MD5

    ee8940bc2a47d26bdcd3347815f03117

  • SHA1

    22a02bf284ea145bba0535dd33c48214995e71d5

  • SHA256

    d02a1d9bb677dba25254aaac415b8f43e91d0bee4d3a26748c61f87fc5b3ada6

  • SHA512

    eed51379e48cfb13f7ed48b4e2d47951f6c6ed49841b18ba3b92d0f5872f741d201ea539de9542f4333276a8c54672bd60505ab57d89bc3f1f54caade02e126c

  • SSDEEP

    6144:J4t+SZX4A49Y8b5+lsdiyDujTyJtCoV5Rxl4eO:J8+SVtsgy6jTKthV5RH

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://associationokeo.shop/api

https://technologyenterdo.shop/api

https://detectordiscusser.shop/api

https://turkeyunlikelyofw.shop/api

Signatures

  • Lumma Stealer

    An infostealer written in C++ first seen in August 2022.

Processes

  • C:\Users\Admin\AppData\Local\Temp\d02a1d9bb677dba25254aaac415b8f43e91d0bee4d3a26748c61f87fc5b3ada6.exe
    "C:\Users\Admin\AppData\Local\Temp\d02a1d9bb677dba25254aaac415b8f43e91d0bee4d3a26748c61f87fc5b3ada6.exe"
    1⤵
      PID:2968

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2968-2-0x0000000003EE0000-0x0000000003F26000-memory.dmp

      Filesize

      280KB

    • memory/2968-1-0x0000000002320000-0x0000000002420000-memory.dmp

      Filesize

      1024KB

    • memory/2968-3-0x0000000000400000-0x00000000022ED000-memory.dmp

      Filesize

      30.9MB

    • memory/2968-9-0x0000000003F30000-0x0000000003F70000-memory.dmp

      Filesize

      256KB

    • memory/2968-8-0x0000000003F30000-0x0000000003F70000-memory.dmp

      Filesize

      256KB

    • memory/2968-7-0x0000000003F30000-0x0000000003F70000-memory.dmp

      Filesize

      256KB

    • memory/2968-6-0x0000000003F30000-0x0000000003F70000-memory.dmp

      Filesize

      256KB

    • memory/2968-5-0x0000000003F30000-0x0000000003F70000-memory.dmp

      Filesize

      256KB

    • memory/2968-4-0x0000000003F30000-0x0000000003F70000-memory.dmp

      Filesize

      256KB