Overview

overview

10

Static

static

3

winprofile

windows7-x64

7

winprofile

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    35532c5fa9c8758c06c256b97b8438b8035a82f37bfad1bb8602be0b10f1e98b
  • Size 6.4MB
  • Sample240610-gs4eeadf74
  • SHA256 35532c5fa9c8758c06c256b97b8438b8035a82f37bfad1bb8602be0b10f1e98b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
lummastealervmprotect

Malware Config

Extracted

Family

  • lumma

C2

  • https://greetclassifytalk.shop/api

  • https://distincttangyflippan.shop/api

  • https://macabrecondfucews.shop/api

  • https://greentastellesqwm.shop/api

  • https://stickyyummyskiwffe.shop/api

  • https://sturdyregularrmsnhw.shop/api

  • https://lamentablegapingkwaq.shop/api

  • https://innerverdanytiresw.shop/api

  • https://standingcomperewhitwo.shop/api

Targets

    • Target
      35532c5fa9c8758c06c256b97b8438b8035a82f37bfad1bb8602be0b10f1e98b
    • Size 6.4MB
    • SHA256 35532c5fa9c8758c06c256b97b8438b8035a82f37bfad1bb8602be0b10f1e98b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    vmprotectlummastealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks