Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
16/03/2024, 00:58
General
-
Target
42422de5b541f2e3061b0792b82e2f9c1d0768d0a76f1175eeab6016bdd2bdff.exe
-
Size
351KB
-
MD5
f66484bbe0017ecfcc8bba54f5a6d2ef
-
SHA1
fa153b862db3b110c0f7633ca7e906fbc96594dd
-
SHA256
42422de5b541f2e3061b0792b82e2f9c1d0768d0a76f1175eeab6016bdd2bdff
-
SHA512
ad619e9e602f3a69865de86ecc8a8b071bba9a46802af348bebba4ed195a0399311f5a2431e568422fec2c461b4f923a9109768c2f85f2a4a8ea610325298c24
-
SSDEEP
6144:K6xepUkVrkGZ+Qy0aLkpqxZTet1UAL1ZAqwnv:3xepU7GKLWqXTet1UAbwn
Score
10/10
Malware Config
Extracted
Family
lumma
C2
https://deadpanstupiddyjjuwk.shop/api
https://colorfulequalugliess.shop/api
Signatures
-
Lumma Stealer
An infostealer written in C++ first seen in August 2022.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\42422de5b541f2e3061b0792b82e2f9c1d0768d0a76f1175eeab6016bdd2bdff.exe"C:\Users\Admin\AppData\Local\Temp\42422de5b541f2e3061b0792b82e2f9c1d0768d0a76f1175eeab6016bdd2bdff.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1580 -s 6762⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 1580 -ip 15801⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
288KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
200KB
-
Filesize
200KB
-
Filesize
200KB
-
Filesize
200KB
-
Filesize
392KB
-
Filesize
392KB
-
Filesize
288KB