lumma | 57761213dce66bcfb7b0453d9aeba25fb386974598ac92193f34ed29eba758b1

Analysis

max time kernel
195s
max time network
304s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
02/05/2024, 05:53

Target
57761213dce66bcfb7b0453d9aeba25fb386974598ac92193f34ed29eba758b1.exe
Size 561KB
Sample240502-glqvqscg22
SHA256 57761213dce66bcfb7b0453d9aeba25fb386974598ac92193f34ed29eba758b1
MD5 3d8936f5a6d5848dbf9cf05788c804ac
SHA1 b82a50c3e2d8be5a164b643ce0fc12578611d3be
SHA512 0fe1f1264f796a13cacd5b41afa2cde3bd5f6c196e1faac0821f814a7ad9f2281f4ca747885abf1418b48cae4df327434b3ea31cedc47ec33c4fbbfa49b9d2ba
SSDEEP 12288:OBAHNam+fgfr/b/Diq9nMoHi6l17sIeK1:RHNajOqq9nfH9sIeK1
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

lumma stealer

Detect Lumma Stealer payload V4 1 IoCs

resource	yara_rule
behavioral2/memory/5100-0-0x0000000000490000-0x000000000050E000-memory.dmp	family_lumma_v4

Lumma Stealer
An infostealer written in C++ first seen in August 2022.
stealer lumma

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3028	5100	WerFault.exe	71

C:\Users\Admin\AppData\Local\Temp\57761213dce66bcfb7b0453d9aeba25fb386974598ac92193f34ed29eba758b1.exe
"C:\Users\Admin\AppData\Local\Temp\57761213dce66bcfb7b0453d9aeba25fb386974598ac92193f34ed29eba758b1.exe"
1⤵
PID:5100
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5100 -s 772
  2⤵
  - Program crash
  PID:3028

memory/5100-0-0x0000000000490000-0x000000000050E000-memory.dmp

Download

memory/5100-5-0x00007FF8DB530000-0x00007FF8DB70B000-memory.dmp

Download