Overview

overview

10

Static

static

3

cef1c2e41a...ed.exe

windows7-x64

5

cef1c2e41a...ed.exe

windows10-2004-x64

10

f63ac140ab...4b.exe

windows7-x64

5

f63ac140ab...4b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    KFlauncher.rar
  • Size 3.8MB
  • Sample240602-m9klhsbc5s
  • SHA256 3d2f3b62bdc8d352154301076564c9c55cebb236e41f4f0098e9615c10e549f9
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
lummastealer

Malware Config

Extracted

Family

  • lumma

C2

  • https://valuablestraigwhi.shop/api

  • https://horsedwollfedrwos.shop/api

  • https://patternapplauderw.shop/api

  • https://understanndtytonyguw.shop/api

  • https://considerrycurrentyws.shop/api

  • https://messtimetabledkolvk.shop/api

  • https://detailbaconroollyws.shop/api

  • https://deprivedrinkyfaiir.shop/api

  • https://relaxtionflouwerwi.shop/api

Targets

    • Target
      cef1c2e41a626163f0dafa331bb814e0fc4eb6f9714c9f29c4d5bda80a95c2ed.exe.vir
    • Size 3.5MB
    • SHA256 cef1c2e41a626163f0dafa331bb814e0fc4eb6f9714c9f29c4d5bda80a95c2ed
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    lummastealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2
    • Target
      f63ac140ab4aabfdb9da63f45f22e696ba17186e09aafb14a9ef9137a48bfe4b.exe.vir
    • Size 3.5MB
    • SHA256 f63ac140ab4aabfdb9da63f45f22e696ba17186e09aafb14a9ef9137a48bfe4b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    lummastealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of SetThreadContext

    behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks