Overview

overview

10

Static

static

1

BLT Update...12.exe

windows10-1703-x64

10

Resubmissions

08/06/2024, 18:39

240608-xak34sfc9610

08/06/2024, 18:37

240608-w9q8qsfc8610

Sharing

Copy URL Twitter E-mail

General

  • Target
    BLT Updater v.1.12.exe
  • Size 541KB
  • Sample240608-xak34sfc96
  • SHA256 4d78a755479061e805e7f1c6049f67805bcca95ef3397ca87c2c56897d867d75
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
lummastealer

Malware Config

Extracted

Family

  • lumma

C2

  • https://liabiliytshareodlkv.shop/api

  • https://notoriousdcellkw.shop/api

  • https://conferencefreckewl.shop/api

  • https://flourhishdiscovrw.shop/api

  • https://landdumpycolorwskfw.shop/api

  • https://ohfantasyproclaiwlo.shop/api

  • https://parallelmercywksoffw.shop/api

  • https://barebrilliancedkoso.shop/api

Targets

    • Target
      BLT Updater v.1.12.exe
    • Size 541KB
    • SHA256 4d78a755479061e805e7f1c6049f67805bcca95ef3397ca87c2c56897d867d75
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    lummastealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks