Analysis
-
max time kernel
123s -
max time network
132s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
17-04-2024 13:56
General
-
Target
e1d3a9a0ce88a02aae8e67f0e37f0682677bd1b791767460566f4f645fc443c3.exe
-
Size
384KB
-
MD5
90756f068450a8ab2c0562581111fbff
-
SHA1
8067a51e60bb92697c2750aecc847d8fbeebe3d1
-
SHA256
e1d3a9a0ce88a02aae8e67f0e37f0682677bd1b791767460566f4f645fc443c3
-
SHA512
0b377fb5394741706c60e0ba5b24042d728ce5a7c14b222e9a007f03ed3eeab8676d1e901865ba524e8ea6a8d095fb3be0b7c5fa6ca8c2fa4765cfd3549b5c71
-
SSDEEP
6144:fgBQIM/sra5hZPDDWJV9Gy0mUexfp2Oe+nJ7ux6Q:4pM/sO5hZPDDW1GyFUeNAOHnBz
Score
10/10
Malware Config
Extracted
Family
lumma
C2
https://deadpanstupiddyjjuwk.shop/api
Signatures
-
Lumma Stealer
An infostealer written in C++ first seen in August 2022.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e1d3a9a0ce88a02aae8e67f0e37f0682677bd1b791767460566f4f645fc443c3.exe"C:\Users\Admin\AppData\Local\Temp\e1d3a9a0ce88a02aae8e67f0e37f0682677bd1b791767460566f4f645fc443c3.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1080 -s 4202⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 1080 -ip 10801⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
288KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
7.0MB
-
Filesize
288KB