Overview

overview

10

Static

static

3

23b62a27e3...a0.exe

windows7-x64

5

23b62a27e3...a0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cdb0621892adf55602c0b39e81047764f16cf6e76aabd0438a02525c84a72c9d

  • Size

    333KB

  • Sample

    240417-q3mn3sac98

  • MD5

    35cbdee4c47346899014ffc8399b88d9

  • SHA1

    91308fb216a44d2d2651cf6d2294b024e8261593

  • SHA256

    cdb0621892adf55602c0b39e81047764f16cf6e76aabd0438a02525c84a72c9d

  • SHA512

    615f21fe6cd0ea53ff1ad633888d7159ec789d5936f04b4f6a45423e2e18ed4b515adb96a8f9da4ecf40082c3bdb14a7900491a2976cf4c7616df88003c2ed52

  • SSDEEP

    6144:i5f26nj2rjgQE+42TMtGllatbgl7Kriv3mJdj/GGCubp7n3p5v:itdnj2rkQE+1Q82tkPuJdrGGCuN3pB

Score
10/10
lummastealer

Malware Config

Extracted

Family

lumma

C2

https://enthusiasimtitleow.shop/api

https://cleartotalfisherwo.shop/api

https://worryfillvolcawoi.shop/api

https://dismissalcylinderhostw.shop/api

https://affordcharmcropwo.shop/api

https://diskretainvigorousiw.shop/api

https://communicationgenerwo.shop/api

https://pillowbrocccolipe.shop/api

Targets

    • Target

      23b62a27e3f5c424b16f31e5009af4f24c8bd13b1f035f87879e2a29236be7a0.exe

    • Size

      379KB

    • MD5

      90f41880d631e243cec086557cb74d63

    • SHA1

      cb385e4172cc227ba72baf29ca1c4411fa99a26d

    • SHA256

      23b62a27e3f5c424b16f31e5009af4f24c8bd13b1f035f87879e2a29236be7a0

    • SHA512

      eeb85b34aa66a7e9a1b1807012999ee439433df23126a52ffa8d4b3cb2026be3bcf63ca25f143de58ba929c0d4feeaf2a603fd6ec6b5379fc48147c22f3783e3

    • SSDEEP

      6144:bJpEcFOcL0W0UXTAwutvdygbqD7jHSm6xBkNLt9kAWHtXMErCU8Oe:bJpdFOg0UUXNdxqLf6Xy8H/rCU8Oe

    Score
    10/10
    lummastealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks