Analysis
-
max time kernel
146s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
09/03/2024, 05:18
General
-
Target
6e6bbfbc267fe2b222e752482d4b66e7.exe
-
Size
265KB
-
MD5
6e6bbfbc267fe2b222e752482d4b66e7
-
SHA1
3ec29b9fd4be1c422233737932618ddcad5a59f9
-
SHA256
95d8a8203fbdf38a3ce777e205a375867bdb44e76067674ec439afaaeb60d031
-
SHA512
41bd9bdac9e9aaa65e9b40c3178691d3fec8600dc8b8cf3dd5b6f17eac0a88b3e8ee3badf115bc0a7d0257aabbd583b3061b445c390162792a0c42121d8515a9
-
SSDEEP
6144:0O6eR7e6LkyNGQ6PC/USAZNvSfIjM0wFvy:U4hGg1qNvSf9hM
Score
10/10
Malware Config
Extracted
Family
lumma
C2
https://scrapedirtyieoqk.shop/api
https://technologyenterdo.shop/api
https://detectordiscusser.shop/api
https://turkeyunlikelyofw.shop/api
https://associationokeo.shop/api
Signatures
-
Lumma Stealer
An infostealer written in C++ first seen in August 2022.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6e6bbfbc267fe2b222e752482d4b66e7.exe"C:\Users\Admin\AppData\Local\Temp\6e6bbfbc267fe2b222e752482d4b66e7.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2708 -s 3722⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 2708 -ip 27081⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
284KB
-
Filesize
312KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
200KB
-
Filesize
200KB
-
Filesize
200KB
-
Filesize
312KB
-
Filesize
284KB