Analysis
- max time kernel
194s - max time network
300s - platform
windows10-1703_x64 - resource
win10-20240404-en - resource tags
- submitted
03/06/2024, 05:15
General
- Target 45b5074728c239f6cc15d3c6f30fc91d9271085d080765c5e5924326391db846.exe
- Size 424KB
- Sample240603-fxjecsdh88
- SHA256 45b5074728c239f6cc15d3c6f30fc91d9271085d080765c5e5924326391db846
Malware Config
Extracted
-
lumma
-
https://fragmentyperspowp.shop/api
-
https://horsedwollfedrwos.shop/api
-
https://patternapplauderw.shop/api
-
https://understanndtytonyguw.shop/api
-
https://considerrycurrentyws.shop/api
-
https://messtimetabledkolvk.shop/api
-
https://detailbaconroollyws.shop/api
-
https://deprivedrinkyfaiir.shop/api
-
https://relaxtionflouwerwi.shop/api
Signatures
- Lumma Stealer
An infostealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\45b5074728c239f6cc15d3c6f30fc91d9271085d080765c5e5924326391db846.exe"C:\Users\Admin\AppData\Local\Temp\45b5074728c239f6cc15d3c6f30fc91d9271085d080765c5e5924326391db846.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1716-2-0x0000000002290000-0x00000000022DD000-memory.dmp
memory/1716-1-0x00000000009F0000-0x0000000000AF0000-memory.dmp
memory/1716-3-0x0000000000400000-0x0000000000456000-memory.dmp
memory/1716-6-0x0000000000400000-0x0000000000456000-memory.dmp
memory/1716-4-0x0000000000400000-0x00000000006A3000-memory.dmp
memory/1716-5-0x0000000002290000-0x00000000022DD000-memory.dmp