Analysis
- max time kernel
195s - max time network
255s - platform
windows10-1703_x64 - resource
win10-20240404-en - resource tags
- submitted
24/05/2024, 00:14
General
- Target 70c1d13db538c6a6b8eb0850264ea114e7c3594f818e59db60b257dea5f63bf9.exe
- Size 311KB
- Sample240524-ajbjpsed21
- SHA256 70c1d13db538c6a6b8eb0850264ea114e7c3594f818e59db60b257dea5f63bf9
Score
10/10
Malware Config
Extracted
Family
-
lumma
C2
-
https://whispedwoodmoodsksl.shop/api
-
https://acceptabledcooeprs.shop/api
-
https://obsceneclassyjuwks.shop/api
-
https://zippyfinickysofwps.shop/api
-
https://miniaturefinerninewjs.shop/api
-
https://plaintediousidowsko.shop/api
-
https://sweetsquarediaslw.shop/api
-
https://holicisticscrarws.shop/api
-
https://boredimperissvieos.shop/api
Signatures
- Lumma Stealer
An infostealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\70c1d13db538c6a6b8eb0850264ea114e7c3594f818e59db60b257dea5f63bf9.exe"C:\Users\Admin\AppData\Local\Temp\70c1d13db538c6a6b8eb0850264ea114e7c3594f818e59db60b257dea5f63bf9.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1680-2-0x0000000004380000-0x00000000043CC000-memory.dmp
memory/1680-3-0x0000000000400000-0x0000000000456000-memory.dmp
memory/1680-1-0x00000000028B0000-0x00000000029B0000-memory.dmp
memory/1680-4-0x0000000000400000-0x000000000273B000-memory.dmp