lumma | 04671313875b99e764ee6607a3f967b7029fc6a7bbe1b6332c02d1ac3f4515b5

Analysis

max time kernel
136s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
19-04-2024 14:08

Target

04671313875b99e764ee6607a3f967b7029fc6a7bbe1b6332c02d1ac3f4515b5.exe
Size

413KB
MD5

08b3df05ea806344a543228ba26cac43
SHA1

133bc4c29d3d9d9db2dee79b1c0d37e3bef1524d
SHA256

04671313875b99e764ee6607a3f967b7029fc6a7bbe1b6332c02d1ac3f4515b5
SHA512

cf6a5e5250d255e9fbe4422eebc86cc8caa1ed2e9e0a03d8b76b1563039a3668d6591c4846bdca15cd876d5305704d15c63c4a54e95f571d79a0e9726246f241
SSDEEP

6144:BJ54gaoc84NTb0lu1jHlsGZsoouIu7AZrXOfkFFqCTz:BJ54Fu4NTb0lO1yBLResvqy

Score

10^/10

lumma stealer

Family

lumma

https://accountasifkwosov.shop/api

https://productivelookewr.shop/api

https://tolerateilusidjukl.shop/api

https://shatterbreathepsw.shop/api

https://shortsvelventysjo.shop/api

https://incredibleextedwj.shop/api

https://alcojoldwograpciw.shop/api

https://liabilitynighstjsko.shop/api

https://demonstationfukewko.shop/api

Lumma Stealer
An infostealer written in C++ first seen in August 2022.
stealer lumma
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

888 848 WerFault.exe 04671313875b99e764ee6607a3f967b7029fc6a7bbe1b6332c02d1ac3f4515b5.exe

pid	pid_target	process	target process
888	848	WerFault.exe	04671313875b99e764ee6607a3f967b7029fc6a7bbe1b6332c02d1ac3f4515b5.exe

C:\Users\Admin\AppData\Local\Temp\04671313875b99e764ee6607a3f967b7029fc6a7bbe1b6332c02d1ac3f4515b5.exe
"C:\Users\Admin\AppData\Local\Temp\04671313875b99e764ee6607a3f967b7029fc6a7bbe1b6332c02d1ac3f4515b5.exe"
1⤵
PID:848
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 848 -s 396
  2⤵
  - Program crash
  PID:888

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 848 -ip 848
1⤵
PID:1792

memory/848-1-0x0000000001A90000-0x0000000001B90000-memory.dmp

Filesize
1024KB

Download
memory/848-2-0x00000000037B0000-0x00000000037FE000-memory.dmp

Filesize
312KB

Download
memory/848-3-0x0000000000400000-0x0000000001A32000-memory.dmp

Filesize
22.2MB

Download
memory/848-4-0x0000000000400000-0x0000000001A32000-memory.dmp

Filesize
22.2MB

Download
memory/848-5-0x00000000037B0000-0x00000000037FE000-memory.dmp

Filesize
312KB

Download