Analysis
- max time kernel
193s - max time network
298s - platform
windows10-1703_x64 - resource
win10-20240404-en - resource tags
- submitted
30/05/2024, 22:55
General
- Target 521b7402c7da670b91919740676bd50728f9f615c1e404a57120bf5dac6f25af.exe
- Size 425KB
- Sample240530-2whmbsch6s
- SHA256 521b7402c7da670b91919740676bd50728f9f615c1e404a57120bf5dac6f25af
Score
10/10
Malware Config
Extracted
Family
-
lumma
C2
-
https://fragmentyperspowp.shop/api
-
https://horsedwollfedrwos.shop/api
-
https://patternapplauderw.shop/api
-
https://understanndtytonyguw.shop/api
-
https://considerrycurrentyws.shop/api
-
https://messtimetabledkolvk.shop/api
-
https://detailbaconroollyws.shop/api
-
https://deprivedrinkyfaiir.shop/api
-
https://relaxtionflouwerwi.shop/api
Signatures
- Lumma Stealer
An infostealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\521b7402c7da670b91919740676bd50728f9f615c1e404a57120bf5dac6f25af.exe"C:\Users\Admin\AppData\Local\Temp\521b7402c7da670b91919740676bd50728f9f615c1e404a57120bf5dac6f25af.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1104-3-0x0000000000400000-0x0000000000456000-memory.dmp
memory/1104-2-0x0000000002A40000-0x0000000002A8D000-memory.dmp
memory/1104-1-0x0000000002AB0000-0x0000000002BB0000-memory.dmp
memory/1104-4-0x0000000000400000-0x00000000028F8000-memory.dmp