Analysis
-
max time kernel
129s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
02/06/2024, 01:23
General
-
Target
b230e0a5f9c66371981e70ce3586b23c0dc61f69a5274a831d692fa4e980b2e1.exe
-
Size
323KB
-
MD5
dd9758ebd7858c5e4248e47f82514243
-
SHA1
44201e36915103cfd9ae7501554574c786ad9750
-
SHA256
b230e0a5f9c66371981e70ce3586b23c0dc61f69a5274a831d692fa4e980b2e1
-
SHA512
b5832cdaf7446aab2c2d98df836a079d3db8eb89442dc3fbb1a7bf2fa0cea54144f9459ed72b185fd541272e50df283253db8b9fa36d7431c542a32175df69b2
-
SSDEEP
6144:xPG/b9ZPMf05F63x6/47sdQNpKgtgmulMxPeZ40:xG/J1F8x6/4odUpBifCeq0
Score
10/10
Malware Config
Extracted
Family
lumma
C2
https://purefinishonerbrothsjke.shop/api
Signatures
-
Lumma Stealer
An infostealer written in C++ first seen in August 2022.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b230e0a5f9c66371981e70ce3586b23c0dc61f69a5274a831d692fa4e980b2e1.exe"C:\Users\Admin\AppData\Local\Temp\b230e0a5f9c66371981e70ce3586b23c0dc61f69a5274a831d692fa4e980b2e1.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3824 -s 3922⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 3824 -ip 38241⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
308KB
-
Filesize
352KB
-
Filesize
352KB
-
Filesize
616KB