Analysis
-
max time kernel
148s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
17-04-2024 13:32
General
-
Target
0f302fc2989a33b4aee665d201f12918271a9d1e87f032ab1527fe624f6dc427.exe
-
Size
347KB
-
MD5
24bfc53ed4eebda7e4f9e152901baba3
-
SHA1
b616065aec2d6e193dbd9d9b3be9b41a8853e9d4
-
SHA256
0f302fc2989a33b4aee665d201f12918271a9d1e87f032ab1527fe624f6dc427
-
SHA512
8fd4df9a40e4901bd90a01508c17aeb47c143555caefe4ebdd95bc1e75d00a2a6fe327e4a3c65113283a88467b850fcb9b87f94e23c7c6b076f61c1f123aaf5d
-
SSDEEP
6144:qm6dLw5+wd2K5bM6d3w6xQ2txjtvNvd5pgcwufDaAfJk:b6dLwBcutd3Licx51vbpgDuNu
Score
10/10
Malware Config
Extracted
Family
lumma
C2
https://deadpanstupiddyjjuwk.shop/api
Signatures
-
Lumma Stealer
An infostealer written in C++ first seen in August 2022.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0f302fc2989a33b4aee665d201f12918271a9d1e87f032ab1527fe624f6dc427.exe"C:\Users\Admin\AppData\Local\Temp\0f302fc2989a33b4aee665d201f12918271a9d1e87f032ab1527fe624f6dc427.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 644 -s 3882⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 644 -ip 6441⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
1.4MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
288KB
-
Filesize
1.4MB