lumma | b1744e8ede4ec6a1b011d1532f0925851240557ad3b86d4eb4bdbd5b85058019

Analysis

max time kernel
145s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
25-04-2024 21:52

Target

b1744e8ede4ec6a1b011d1532f0925851240557ad3b86d4eb4bdbd5b85058019.exe
Size

366KB
MD5

e72663ab3dbf44d57c11e5a0f3b10715
SHA1

8c9e266eb360f3369ac49f8306e0171493fe6642
SHA256

b1744e8ede4ec6a1b011d1532f0925851240557ad3b86d4eb4bdbd5b85058019
SHA512

c992c5d2423ae89066d1a0b2a80f4fba9089960e7848a50e4113fc2445f555f38762fa42ebeb995bb769085801cd450985f92ecce255393ddc3c95b454ec2f83
SSDEEP

6144:kLqQrDvkfWMB6BNUf0PiraXb8bniyJxbmRf:kLqQrfe6BN5hXIbiyJtm

Score

10^/10

lumma stealer

Family

lumma

https://strollheavengwu.shop/api

https://productivelookewr.shop/api

https://tolerateilusidjukl.shop/api

https://shatterbreathepsw.shop/api

https://shortsvelventysjo.shop/api

https://incredibleextedwj.shop/api

https://alcojoldwograpciw.shop/api

https://liabilitynighstjsko.shop/api

https://demonstationfukewko.shop/api

Lumma Stealer
An infostealer written in C++ first seen in August 2022.
stealer lumma
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1904 4400 WerFault.exe b1744e8ede4ec6a1b011d1532f0925851240557ad3b86d4eb4bdbd5b85058019.exe

pid	pid_target	process	target process
1904	4400	WerFault.exe	b1744e8ede4ec6a1b011d1532f0925851240557ad3b86d4eb4bdbd5b85058019.exe

C:\Users\Admin\AppData\Local\Temp\b1744e8ede4ec6a1b011d1532f0925851240557ad3b86d4eb4bdbd5b85058019.exe
"C:\Users\Admin\AppData\Local\Temp\b1744e8ede4ec6a1b011d1532f0925851240557ad3b86d4eb4bdbd5b85058019.exe"
1⤵
PID:4400
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4400 -s 1172
  2⤵
  - Program crash
  PID:1904

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4400 -ip 4400
1⤵
PID:3492

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3208 --field-trial-handle=2256,i,6670388345726423024,18382795228658886258,262144 --variations-seed-version /prefetch:8
1⤵
PID:2440

memory/4400-1-0x0000000000AA0000-0x0000000000BA0000-memory.dmp

Filesize
1024KB

Download
memory/4400-2-0x00000000025A0000-0x00000000025EB000-memory.dmp

Filesize
300KB

Download
memory/4400-3-0x0000000000400000-0x000000000085D000-memory.dmp

Filesize
4.4MB

Download
memory/4400-4-0x0000000000400000-0x000000000085D000-memory.dmp

Filesize
4.4MB

Download
memory/4400-6-0x00000000025A0000-0x00000000025EB000-memory.dmp

Filesize
300KB

Download