lumma | 82709e565293b5505ed2ce21c18b277790522af6c9cfa93bc766c9fd02cda16c

Analysis

max time kernel
150s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
20-04-2024 07:32

Target

82709e565293b5505ed2ce21c18b277790522af6c9cfa93bc766c9fd02cda16c.exe
Size

450KB
MD5

3144a0ff53df26dba0fff6343328e143
SHA1

d635adc426bc16c1b8275fcb227c65e6014bc255
SHA256

82709e565293b5505ed2ce21c18b277790522af6c9cfa93bc766c9fd02cda16c
SHA512

de26c8e3fe574f065e0f69a9071da8a0551f41810a430a98ee5eecd2acc7002ad016a381f864ccf5cd708136f507a5489bda3a9a8098ad4145edee36bf64d7cc
SSDEEP

6144:6iyzo3giCZnE8VReVEdX4cZAGuA+WyddxY0FGik:6iyz7iCZn5Ree2GudJECG

Score

10^/10

lumma stealer

Family

lumma

https://strollheavengwu.shop/api

https://productivelookewr.shop/api

https://tolerateilusidjukl.shop/api

https://shatterbreathepsw.shop/api

https://shortsvelventysjo.shop/api

https://incredibleextedwj.shop/api

https://alcojoldwograpciw.shop/api

https://liabilitynighstjsko.shop/api

https://demonstationfukewko.shop/api

Lumma Stealer
An infostealer written in C++ first seen in August 2022.
stealer lumma
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1504 3612 WerFault.exe 82709e565293b5505ed2ce21c18b277790522af6c9cfa93bc766c9fd02cda16c.exe

pid	pid_target	process	target process
1504	3612	WerFault.exe	82709e565293b5505ed2ce21c18b277790522af6c9cfa93bc766c9fd02cda16c.exe

C:\Users\Admin\AppData\Local\Temp\82709e565293b5505ed2ce21c18b277790522af6c9cfa93bc766c9fd02cda16c.exe
"C:\Users\Admin\AppData\Local\Temp\82709e565293b5505ed2ce21c18b277790522af6c9cfa93bc766c9fd02cda16c.exe"
1⤵
PID:3612
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3612 -s 1192
  2⤵
  - Program crash
  PID:1504

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 3612 -ip 3612
1⤵
PID:2728

memory/3612-1-0x0000000001D60000-0x0000000001E60000-memory.dmp

Filesize
1024KB

Download
memory/3612-2-0x00000000037B0000-0x00000000037FE000-memory.dmp

Filesize
312KB

Download
memory/3612-3-0x0000000000400000-0x0000000001A3B000-memory.dmp

Filesize
22.2MB

Download
memory/3612-5-0x00000000037B0000-0x00000000037FE000-memory.dmp

Filesize
312KB

Download