Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
08-04-2024 23:22
General
-
Target
21b80adfb8170810e8ff81ec825a96066ef7da1642677ec0a0199e8e68bbfffa.exe
-
Size
379KB
-
MD5
54343e9e0b7285b6a758dcc4419d4155
-
SHA1
18b7caa515612cf269e8175640ff8e44f4d1866b
-
SHA256
21b80adfb8170810e8ff81ec825a96066ef7da1642677ec0a0199e8e68bbfffa
-
SHA512
9473aaf82ce3409c34a9933ef145065329fad567187a33ca28093b180706d987b78c4723b86c13592002d2f9cf9bd2264b05fcc2cbd64555f93f8930f524f5eb
-
SSDEEP
6144:aO62LWsk9bSxdUBBiuLWjm0z0geQ5BifK/g+tN+sP:Nt5PIBiuLkhFasP
Malware Config
Extracted
lumma
https://appliedgrandyjuiw.shop/api
https://birdpenallitysydw.shop/api
https://cinemaclinicttanwk.shop/api
https://disagreemenywyws.shop/api
https://speedparticipatewo.shop/api
https://fixturewordbakewos.shop/api
https://colorprioritytubbew.shop/api
https://abuselinenaidwjuew.shop/api
https://methodgreenglassdatw.shop/api
Signatures
-
Lumma Stealer
An infostealer written in C++ first seen in August 2022.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\21b80adfb8170810e8ff81ec825a96066ef7da1642677ec0a0199e8e68bbfffa.exe"C:\Users\Admin\AppData\Local\Temp\21b80adfb8170810e8ff81ec825a96066ef7da1642677ec0a0199e8e68bbfffa.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1184 -s 11482⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 1184 -ip 11841⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
816KB
-
Filesize
200KB
-
Filesize
200KB