Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
02/06/2024, 08:42
General
- Target 2663efd03818f4459b8abd683662fbe7c325b1fed3f552c52ff60dce292ca126.exe
- Size 298KB
- Sample240602-kl88vsgd4t
- SHA256 2663efd03818f4459b8abd683662fbe7c325b1fed3f552c52ff60dce292ca126
Score
10/10
Malware Config
Extracted
Family
-
lumma
C2
-
https://whispedwoodmoodsksl.shop/api
-
https://acceptabledcooeprs.shop/api
-
https://obsceneclassyjuwks.shop/api
-
https://zippyfinickysofwps.shop/api
-
https://miniaturefinerninewjs.shop/api
-
https://plaintediousidowsko.shop/api
-
https://sweetsquarediaslw.shop/api
-
https://holicisticscrarws.shop/api
-
https://boredimperissvieos.shop/api
Signatures
- Lumma Stealer
An infostealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2663efd03818f4459b8abd683662fbe7c325b1fed3f552c52ff60dce292ca126.exe"C:\Users\Admin\AppData\Local\Temp\2663efd03818f4459b8abd683662fbe7c325b1fed3f552c52ff60dce292ca126.exe"1⤵