Analysis
- max time kernel
193s - max time network
298s - platform
windows10-1703_x64 - resource
win10-20240404-en - resource tags
- submitted
13/06/2024, 22:54
General
- Target 52c29eb5cbbf00294513eb3533879b80e4bff71e52ccddd47ea08c5fcf2b3846.exe
- Size 383KB
- Sample240613-2vlycsxfrk
- SHA256 52c29eb5cbbf00294513eb3533879b80e4bff71e52ccddd47ea08c5fcf2b3846
Malware Config
Extracted
-
lumma
-
https://stronggemateraislw.shop/api
-
https://distincttangyflippan.shop/api
-
https://macabrecondfucews.shop/api
-
https://greentastellesqwm.shop/api
-
https://stickyyummyskiwffe.shop/api
-
https://sturdyregularrmsnhw.shop/api
-
https://lamentablegapingkwaq.shop/api
-
https://innerverdanytiresw.shop/api
-
https://standingcomperewhitwo.shop/api
Signatures
- Lumma Stealer
An infostealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\52c29eb5cbbf00294513eb3533879b80e4bff71e52ccddd47ea08c5fcf2b3846.exe"C:\Users\Admin\AppData\Local\Temp\52c29eb5cbbf00294513eb3533879b80e4bff71e52ccddd47ea08c5fcf2b3846.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2100-2-0x0000000002310000-0x0000000002360000-memory.dmp
memory/2100-1-0x00000000007E0000-0x00000000008E0000-memory.dmp
memory/2100-3-0x0000000000400000-0x000000000045B000-memory.dmp
memory/2100-6-0x0000000000400000-0x000000000045B000-memory.dmp
memory/2100-5-0x0000000002310000-0x0000000002360000-memory.dmp
memory/2100-4-0x0000000000400000-0x0000000000699000-memory.dmp