Overview

overview

10

Static

static

3

winprofile

windows7-x64

1

winprofile

windows10-1703-x64

10

Analysis

  • max time kernel
    195s
  • max time network
    262s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    13/06/2024, 22:59

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    590ebd6f2bb5735659f13faa2fa92c8520918affd39f9878a6bf648f05e0e8f5.exe

  • Size

    2.4MB

  • MD5

    f9fc06f0cc64b6a700eda6fd6d816df3

  • SHA1

    be3d20b989ea461c74567f3a4af594d4cf3a5f72

  • SHA256

    590ebd6f2bb5735659f13faa2fa92c8520918affd39f9878a6bf648f05e0e8f5

  • SHA512

    16f0a72f9336dc2896707a3256a5dfd2c61e8aade904ee29adf2ad92fbd58f87ef1bbe94b40726e0aa63da7216ceeaef6f646235df1bd928e261eb7492c81859

  • SSDEEP

    49152:x9MTyxpl09Ltg3yLzZvLSyGc4jRk1Mh44DfN0BNuQzWoLBs6LBe8hB:xmTyH2VtNLFDLG/RfhmByoLBBLPf

Score
10/10
lummastealer

Malware Config

Extracted

Family

lumma

C2

https://willingyhollowsk.shop/api

https://distincttangyflippan.shop/api

https://macabrecondfucews.shop/api

https://greentastellesqwm.shop/api

https://stickyyummyskiwffe.shop/api

https://sturdyregularrmsnhw.shop/api

https://lamentablegapingkwaq.shop/api

https://innerverdanytiresw.shop/api

https://standingcomperewhitwo.shop/api

Signatures

  • Lumma Stealer

    An infostealer written in C++ first seen in August 2022.

    stealerlumma

Processes

  • C:\Users\Admin\AppData\Local\Temp\590ebd6f2bb5735659f13faa2fa92c8520918affd39f9878a6bf648f05e0e8f5.exe
    "C:\Users\Admin\AppData\Local\Temp\590ebd6f2bb5735659f13faa2fa92c8520918affd39f9878a6bf648f05e0e8f5.exe"
    1⤵
      PID:3580

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/3580-0-0x0000000000D50000-0x000000000122A000-memory.dmp

            Filesize

            4.9MB

            Download