Overview

overview

10

Static

static

3

d130f492c4...8b.exe

windows7-x64

1

d130f492c4...8b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7e37f8c945d005226870e60aa2baea93.bin

  • Size

    3.6MB

  • Sample

    240504-bvv8xshf9t

  • MD5

    7e85682eed01be4d5127f7395b1400c6

  • SHA1

    23eb386d07b4bc93d6bafc091fed4536e26437fc

  • SHA256

    cf5d644ea3e2c6a2c3e3199558943595fdbf85fde2ea2c25e72238b1a13434b0

  • SHA512

    64facabea83d3c83483af645c75495bd1157718f64a96c69eaa20fef49bbeaaaed9dde02c1c083341a74229b40d1394ad63596620ffff4b4e5bbb1a11cb831a6

  • SSDEEP

    98304:X6AQ+RWp8CZtDB7M/rxLyVr2TskP/8BDba+bNdWZ6C6JsO2X7:XRCDB7MVeZvA6a+OZmJsN

Score
10/10
lummastealer

Malware Config

Extracted

Family

lumma

C2

https://shatterbreathepsw.shop/api

https://productivelookewr.shop/api

https://tolerateilusidjukl.shop/api

https://shortsvelventysjo.shop/api

https://incredibleextedwj.shop/api

https://alcojoldwograpciw.shop/api

https://liabilitynighstjsko.shop/api

https://demonstationfukewko.shop/api

Targets

    • Target

      d130f492c40697a34e2d1e7b1e9a5e3ba37c7f6b4271271fba6b5c1e9048af8b.exe

    • Size

      8.6MB

    • MD5

      7e37f8c945d005226870e60aa2baea93

    • SHA1

      d8a457a032ead8cc0d692efd497914e8cc69e8a4

    • SHA256

      d130f492c40697a34e2d1e7b1e9a5e3ba37c7f6b4271271fba6b5c1e9048af8b

    • SHA512

      d6dfcbd1f7bca1e712bdb184a27c5a06eb1073f03529fd6be9ed2cd231e4906edf9c7bb6fd89453a7e062cc317e4655b19825fdbf7a32d0f2c3ac3ef4bc2f8d6

    • SSDEEP

      98304:MF3gRcZz6mXSsz06DoWy0hSEVBhG/Y6Pv:IdN6mXSsFo7i/VB9w

    Score
    10/10
    lummastealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks