Overview

overview

10

Static

static

3

c5c773e7a2...6a.exe

windows7-x64

1

c5c773e7a2...6a.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    93s
  • max time network
    113s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-04-2024 01:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c5c773e7a27fa021cd656f7743c3351a6b42ec333533323aa049a0877707216a.exe

  • Size

    359KB

  • MD5

    5281a3b932a77491091881ab9141b523

  • SHA1

    0e46cc3760599bd2c8b7964a6d771163deda7e63

  • SHA256

    c5c773e7a27fa021cd656f7743c3351a6b42ec333533323aa049a0877707216a

  • SHA512

    2ef9b89ecaca90a5e0f8ce073587d563580b98cfcbddaf70b0527ac4ee55e10efbb05b05e23d7e398338e4ede03f736bfe9c4a02460dca78a00d270fa7f69ce5

  • SSDEEP

    6144:QLD4DtcToI6PA3H39LaYx7VkcngNoxmLjguKaDT9DKEaYTg:QG3I6oXVecngKxmHT9+

Score
10/10
lummastealer

Malware Config

Extracted

Family

lumma

C2

https://exceptionwillapews.shop/api

https://entitlementappwo.shop/api

https://economicscreateojsu.shop/api

https://pushjellysingeywus.shop/api

https://absentconvicsjawun.shop/api

https://suitcaseacanehalk.shop/api

https://bordersoarmanusjuw.shop/api

https://mealplayerpreceodsju.shop/api

https://wifeplasterbakewis.shop/api

Signatures

  • Lumma Stealer

    An infostealer written in C++ first seen in August 2022.

    stealerlumma
  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c5c773e7a27fa021cd656f7743c3351a6b42ec333533323aa049a0877707216a.exe
    "C:\Users\Admin\AppData\Local\Temp\c5c773e7a27fa021cd656f7743c3351a6b42ec333533323aa049a0877707216a.exe"
    1⤵
      PID:872
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 872 -s 388
        2⤵
        • Program crash
        PID:1768
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 872 -ip 872
      1⤵
        PID:4472

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/872-1-0x0000000002CF0000-0x0000000002DF0000-memory.dmp

        Filesize

        1024KB

        Download

      • memory/872-2-0x0000000004880000-0x00000000048CC000-memory.dmp

        Filesize

        304KB

        Download

      • memory/872-3-0x0000000000400000-0x0000000002C3D000-memory.dmp

        Filesize

        40.2MB

        Download

      • memory/872-4-0x0000000000400000-0x0000000002C3D000-memory.dmp

        Filesize

        40.2MB

        Download

      • memory/872-5-0x0000000004880000-0x00000000048CC000-memory.dmp

        Filesize

        304KB

        Download