Overview

overview

10

Static

static

3

winprofile

windows7-x64

5

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    795e895ae1bf82dd4533237ea30c469d3af97b8ebe1eb039adf029241622545c

  • Size

    308KB

  • Sample

    240418-2qyrcshb27

  • MD5

    3eec3effb3244d5e201139d7955a9632

  • SHA1

    a07c184b128c3158a3e3a07bb240acc7c7663f95

  • SHA256

    795e895ae1bf82dd4533237ea30c469d3af97b8ebe1eb039adf029241622545c

  • SHA512

    9db6f758e882df7e9ab0b34ece52a7848011ef162af6c4d66b605bf06608f0e0aa37c8a23fe0fe0ea8f7a97a11da587d354d59d9f49568fc96a2af946ac86dba

  • SSDEEP

    6144:7RmuVoTCpYiODBz2p3hd7PoeetrTuRHGg4mt6nIFLt7:7vMCihQ3bDoee9MmgNt6IFL9

Score
10/10
lummastealer

Malware Config

Extracted

Family

lumma

C2

https://entitlementappwo.shop/api

https://economicscreateojsu.shop/api

https://pushjellysingeywus.shop/api

https://absentconvicsjawun.shop/api

https://suitcaseacanehalk.shop/api

https://bordersoarmanusjuw.shop/api

https://mealplayerpreceodsju.shop/api

https://wifeplasterbakewis.shop/api

Targets

    • Target

      795e895ae1bf82dd4533237ea30c469d3af97b8ebe1eb039adf029241622545c

    • Size

      308KB

    • MD5

      3eec3effb3244d5e201139d7955a9632

    • SHA1

      a07c184b128c3158a3e3a07bb240acc7c7663f95

    • SHA256

      795e895ae1bf82dd4533237ea30c469d3af97b8ebe1eb039adf029241622545c

    • SHA512

      9db6f758e882df7e9ab0b34ece52a7848011ef162af6c4d66b605bf06608f0e0aa37c8a23fe0fe0ea8f7a97a11da587d354d59d9f49568fc96a2af946ac86dba

    • SSDEEP

      6144:7RmuVoTCpYiODBz2p3hd7PoeetrTuRHGg4mt6nIFLt7:7vMCihQ3bDoee9MmgNt6IFL9

    Score
    10/10
    lummastealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks