lumma | a7db1bfc2bd92e8de7f6ee5a209abe72d4fa4c828298f87b36d0e5c89178772a

Analysis

max time kernel
93s
max time network
113s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
18-04-2024 23:20

Target

a7db1bfc2bd92e8de7f6ee5a209abe72d4fa4c828298f87b36d0e5c89178772a.exe
Size

366KB
MD5

2e0d48e0ad7e3cb77d54c6c68560efe8
SHA1

d7f1a6641996dc22fd1d88c41c57a5dcaed9aa88
SHA256

a7db1bfc2bd92e8de7f6ee5a209abe72d4fa4c828298f87b36d0e5c89178772a
SHA512

6d3460d634d9863df25d0ac45e3c1d646beb40fd290cdd717c4d525af6b88be3a388a0334e65ae5649ef0f1742d5f1a3c9f593f71ff92c97eacd003644cc5d01
SSDEEP

6144:ajLQCXMIbibzPlZTWosGG+vX5rSSw9SQD1iUaBAX2d35YAVN+6L7B:aj0Yxbgvtsl+BrSS2D1i0mdp0+

Score

10^/10

lumma stealer

Family

lumma

https://accountasifkwosov.shop/api

https://productivelookewr.shop/api

https://tolerateilusidjukl.shop/api

https://shatterbreathepsw.shop/api

https://shortsvelventysjo.shop/api

https://incredibleextedwj.shop/api

https://alcojoldwograpciw.shop/api

https://liabilitynighstjsko.shop/api

https://demonstationfukewko.shop/api

Lumma Stealer
An infostealer written in C++ first seen in August 2022.
stealer lumma
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1756 4632 WerFault.exe a7db1bfc2bd92e8de7f6ee5a209abe72d4fa4c828298f87b36d0e5c89178772a.exe

pid	pid_target	process	target process
1756	4632	WerFault.exe	a7db1bfc2bd92e8de7f6ee5a209abe72d4fa4c828298f87b36d0e5c89178772a.exe

C:\Users\Admin\AppData\Local\Temp\a7db1bfc2bd92e8de7f6ee5a209abe72d4fa4c828298f87b36d0e5c89178772a.exe
"C:\Users\Admin\AppData\Local\Temp\a7db1bfc2bd92e8de7f6ee5a209abe72d4fa4c828298f87b36d0e5c89178772a.exe"
1⤵
PID:4632
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4632 -s 392
  2⤵
  - Program crash
  PID:1756

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 4632 -ip 4632
1⤵
PID:388

memory/4632-2-0x0000000002E60000-0x0000000002EAE000-memory.dmp

Filesize
312KB

Download
memory/4632-1-0x0000000002F10000-0x0000000003010000-memory.dmp

Filesize
1024KB

Download
memory/4632-3-0x0000000000400000-0x0000000002C3E000-memory.dmp

Filesize
40.2MB

Download
memory/4632-4-0x0000000000400000-0x0000000002C3E000-memory.dmp

Filesize
40.2MB

Download
memory/4632-5-0x0000000002E60000-0x0000000002EAE000-memory.dmp

Filesize
312KB

Download