lumma | 914792977a1a73883b4b0cf04655bad785027cc1c0a2a478f059120682eb8af7

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
18-04-2024 15:56

Target

914792977a1a73883b4b0cf04655bad785027cc1c0a2a478f059120682eb8af7.exe
Size

359KB
MD5

2ee2a750147bdcadc284bdf5f73f8e43
SHA1

e2217821f2ee52eb043d1d5c8b3fe13ef09fa09a
SHA256

914792977a1a73883b4b0cf04655bad785027cc1c0a2a478f059120682eb8af7
SHA512

f3f9d6a6557641ed5dfc1935f51bcc38711d9e607ebcda5c5a210ea4ba7b71e054584ab44dfdfb5244306b7b16849cd49fdf5c77043bb6294ed32f98a7e1b144
SSDEEP

6144:Ro7kBLEX45vZlyZgdFlbdMEHx3uzZvetJW8/qXvKS:Ro7kBY49bsjG4ec

Score

10^/10

lumma stealer

Family

lumma

https://exceptionwillapews.shop/api

https://entitlementappwo.shop/api

https://economicscreateojsu.shop/api

https://pushjellysingeywus.shop/api

https://absentconvicsjawun.shop/api

https://suitcaseacanehalk.shop/api

https://bordersoarmanusjuw.shop/api

https://mealplayerpreceodsju.shop/api

https://wifeplasterbakewis.shop/api

Lumma Stealer
An infostealer written in C++ first seen in August 2022.
stealer lumma
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3736 3480 WerFault.exe 914792977a1a73883b4b0cf04655bad785027cc1c0a2a478f059120682eb8af7.exe

pid	pid_target	process	target process
3736	3480	WerFault.exe	914792977a1a73883b4b0cf04655bad785027cc1c0a2a478f059120682eb8af7.exe

C:\Users\Admin\AppData\Local\Temp\914792977a1a73883b4b0cf04655bad785027cc1c0a2a478f059120682eb8af7.exe
"C:\Users\Admin\AppData\Local\Temp\914792977a1a73883b4b0cf04655bad785027cc1c0a2a478f059120682eb8af7.exe"
1⤵
PID:3480
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3480 -s 1128
  2⤵
  - Program crash
  PID:3736

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 3480 -ip 3480
1⤵
PID:4788

memory/3480-2-0x00000000048A0000-0x00000000048EC000-memory.dmp

Filesize
304KB

Download
memory/3480-1-0x0000000002CB0000-0x0000000002DB0000-memory.dmp

Filesize
1024KB

Download
memory/3480-3-0x0000000000400000-0x0000000002C3C000-memory.dmp

Filesize
40.2MB

Download
memory/3480-5-0x00000000048A0000-0x00000000048EC000-memory.dmp

Filesize
304KB

Download
memory/3480-4-0x0000000000400000-0x0000000002C3C000-memory.dmp

Filesize
40.2MB

Download