Overview

overview

10

Static

static

3

GamePingBo...up.exe

windows10-1703-x64

10

GamePingBo...up.exe

windows10-2004-x64

10

GamePingBo...up.exe

windows11-21h2-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    GamePingBooster.zip

  • Size

    2.8MB

  • Sample

    240418-yp968add47

  • MD5

    e2f51a9eaa72f402cb8a764db9fcb0b9

  • SHA1

    5da5376297de60209ddbabb2bc4d2137f1bc315d

  • SHA256

    e1a876852a42d221b5bb7a2d934e50c31d2006f9df258dab589b0078cc6c63f3

  • SHA512

    2df93b443c79d86cce2a972f79d8551c4a0bb0787598b91920f0494cc763a68dd85bcbfcd6a05ba34dd78a9871f4aef539ade4d12cbfd28f8e651259712b1039

  • SSDEEP

    49152:j5HI1RyyVI5lBb4JoeJZCKntUkvUY4DYlEgQtPkYgOAr73MNDdrJM:jVmfAb4J/Lx14axQF/AMpdrJM

Score
10/10
lummastealer

Malware Config

Extracted

Family

lumma

C2

https://bordersoarmanusjuw.shop/api

https://entitlementappwo.shop/api

https://economicscreateojsu.shop/api

https://pushjellysingeywus.shop/api

https://absentconvicsjawun.shop/api

https://suitcaseacanehalk.shop/api

https://mealplayerpreceodsju.shop/api

https://wifeplasterbakewis.shop/api

Targets

    • Target

      GamePingBooster/Setup.exe

    • Size

      493KB

    • MD5

      979119c0ff7fe623c1115a1a965507d2

    • SHA1

      26bda6aa1aef1243aae1da88e986af6c8e990fd1

    • SHA256

      84b587ec425746bfa985048f3c189fd96f485759e5cc78d90c8287764b08ae17

    • SHA512

      d716badbfd48216a51b0bc0a1b49ce7011d047c8609a2f0cdd25273e4c72222704cdd6071bce1fdc9ba46b042206525dd0fba0e76306ac44c996c4874986da3d

    • SSDEEP

      12288:Wx36Rr9pdHMJtOmz448EY3lfEX9ZNNp4bZu32pteE:WR67HHMbrE4BYWqZ06A

    Score
    10/10
    lummastealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks