lumma | 20322575b9e0e59bb15261afeab2ab4e4dfc598ba0ed44d22f7b3831007b4a97

Analysis

max time kernel
142s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
20-04-2024 01:19

Target

20322575b9e0e59bb15261afeab2ab4e4dfc598ba0ed44d22f7b3831007b4a97.exe
Size

491KB
MD5

d8fc7276d760a0a7ef156bf647278770
SHA1

f8fbcce5e14e995c63d95a0c6b053e5285af89cc
SHA256

20322575b9e0e59bb15261afeab2ab4e4dfc598ba0ed44d22f7b3831007b4a97
SHA512

e7ea3ab7057d798ce9f6552a7464f73412e50112bff086f27ccbc5772f707e2bcfd369b7fa16d5ecb367bd04a1394ba0e4222b1837bb44217a3078634024fb19
SSDEEP

6144:zufxfplO83UuksOoMrvyB2rqdNHe1RPjFWVjbM60Ai2eMG7J3B0:PCUukOMrrqGPjobMBc5G7JW

Score

10^/10

lumma stealer

Family

lumma

https://strollheavengwu.shop/api

https://productivelookewr.shop/api

https://tolerateilusidjukl.shop/api

https://shatterbreathepsw.shop/api

https://shortsvelventysjo.shop/api

https://incredibleextedwj.shop/api

https://alcojoldwograpciw.shop/api

https://liabilitynighstjsko.shop/api

https://demonstationfukewko.shop/api

Lumma Stealer
An infostealer written in C++ first seen in August 2022.
stealer lumma
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1216 3412 WerFault.exe 20322575b9e0e59bb15261afeab2ab4e4dfc598ba0ed44d22f7b3831007b4a97.exe

pid	pid_target	process	target process
1216	3412	WerFault.exe	20322575b9e0e59bb15261afeab2ab4e4dfc598ba0ed44d22f7b3831007b4a97.exe

C:\Users\Admin\AppData\Local\Temp\20322575b9e0e59bb15261afeab2ab4e4dfc598ba0ed44d22f7b3831007b4a97.exe
"C:\Users\Admin\AppData\Local\Temp\20322575b9e0e59bb15261afeab2ab4e4dfc598ba0ed44d22f7b3831007b4a97.exe"
1⤵
PID:3412
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3412 -s 1140
  2⤵
  - Program crash
  PID:1216

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3412 -ip 3412
1⤵
PID:4564

memory/3412-1-0x0000000001C30000-0x0000000001D30000-memory.dmp

Filesize
1024KB

Download
memory/3412-2-0x00000000037D0000-0x000000000381E000-memory.dmp

Filesize
312KB

Download
memory/3412-3-0x0000000000400000-0x0000000001A46000-memory.dmp

Filesize
22.3MB

Download
memory/3412-4-0x0000000000400000-0x0000000001A46000-memory.dmp

Filesize
22.3MB

Download
memory/3412-6-0x00000000037D0000-0x000000000381E000-memory.dmp

Filesize
312KB

Download