lumma | 0fd642bca56619f8f4112373fecde41fc3e5bfee58583cd3867a02bf0acb365c

Analysis

max time kernel
92s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
17-04-2024 13:24

Target

b484b5356d00aef00d35c1339aa0c8937f2725cdccc06156d1941ca6bf63efb5.exe
Size

372KB
MD5

ee00befc0e8ddba06dfa8510902aff79
SHA1

7af7a60d99c8cea7c9d64e87ef2a4bfa56199328
SHA256

b484b5356d00aef00d35c1339aa0c8937f2725cdccc06156d1941ca6bf63efb5
SHA512

a063c2b216955531a8661436eb8ffcbf0f43870e459f942f629e7586ff725adcb4b7da36063412716e961c88025a16aa30450adad86045202280065c99632b81
SSDEEP

3072:SA3jy8PU2hlpXQ+nIdw4ziY0T+0oU/xil8NLuimFRTxgZX+jJGDCzA4O6VG5Du9S:zmMAs+WiPzT6V7DN1HuU319Xi

Score

10^/10

lumma stealer

Family

lumma

https://paintercrutcheniw.shop/api

https://cleartotalfisherwo.shop/api

https://worryfillvolcawoi.shop/api

https://enthusiasimtitleow.shop/api

https://dismissalcylinderhostw.shop/api

https://affordcharmcropwo.shop/api

https://diskretainvigorousiw.shop/api

https://communicationgenerwo.shop/api

https://pillowbrocccolipe.shop/api

Lumma Stealer
An infostealer written in C++ first seen in August 2022.
stealer lumma
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2296 4568 WerFault.exe b484b5356d00aef00d35c1339aa0c8937f2725cdccc06156d1941ca6bf63efb5.exe

pid	pid_target	process	target process
2296	4568	WerFault.exe	b484b5356d00aef00d35c1339aa0c8937f2725cdccc06156d1941ca6bf63efb5.exe

C:\Users\Admin\AppData\Local\Temp\b484b5356d00aef00d35c1339aa0c8937f2725cdccc06156d1941ca6bf63efb5.exe
"C:\Users\Admin\AppData\Local\Temp\b484b5356d00aef00d35c1339aa0c8937f2725cdccc06156d1941ca6bf63efb5.exe"
1⤵
PID:4568

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4568 -s 1240
2⤵
- Program crash
PID:2296

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 480 -p 4568 -ip 4568
1⤵
PID:1796

memory/4568-1-0x0000000000EE0000-0x0000000000FE0000-memory.dmp

Filesize
1024KB

Download
memory/4568-2-0x0000000002880000-0x00000000028C9000-memory.dmp

Filesize
292KB

Download
memory/4568-3-0x0000000000400000-0x0000000000B06000-memory.dmp

Filesize
7.0MB

Download
memory/4568-4-0x0000000000EB0000-0x0000000000EB1000-memory.dmp

Filesize
4KB

Download
memory/4568-6-0x0000000002880000-0x00000000028C9000-memory.dmp

Filesize
292KB

Download