General

  • Target
    ab9a433a8dfe29b80efc4dd932561408.bin
  • Size 12.3MB
  • Sample240621-dsjs8axbkb
  • SHA256 90bd6afff4b21beb216996859d60bbfe4c193b975e1f5e52bf18028333e1dcd6
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • lumma

C2
  • https://acceptconvectiiw.shop/api

  • https://publicitycharetew.shop/api

  • https://computerexcudesp.shop/api

  • https://leafcalfconflcitw.shop/api

  • https://injurypiggyoewirog.shop/api

  • https://bargainnygroandjwk.shop/api

  • https://disappointcredisotw.shop/api

  • https://doughtdrillyksow.shop/api

  • https://facilitycoursedw.shop/api

Targets

    • Target
      #^FulL_PcSetUp_2025_Pas$W0rd$/Setup.exe
    • Size 25.3MB
    • SHA256 5b62a7ad41c986edbb249112793628eb2f2679cfdccf9ae23b3c12cc7baa4c4e
    • MD5 SHA1 SHA512 SSDEEP
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    • Target
      #^FulL_PcSetUp_2025_Pas$W0rd$/vcruntime140.dll
    • Size 88KB
    • SHA256 eb6a3a491efcc911f9dff457d42fed85c4c170139414470ea951b0dafe352829
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      #^FulL_PcSetUp_2025_Pas$W0rd$/vcruntime140_app.dll
    • Size 21KB
    • SHA256 813a447192c4fa7d25d0716b769399546f8bf6b31269dd8ad47f9812008d79e6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      #^FulL_PcSetUp_2025_Pas$W0rd$/x86/HDHelper_[0MB]_[1].exe
    • Size 566KB
    • SHA256 72ece91f65a461c5023695bf5f31b5b6b5bd629dba8407524e8144f6d1e160e8
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      #^FulL_PcSetUp_2025_Pas$W0rd$/x86/NvStereoUtilityOGL_[1MB]_[1].exe
    • Size 1.1MB
    • SHA256 c2c71318a17f7f767e5d203d22b48f27eecae46a4f37082d7b413c51da6183b3
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      #^FulL_PcSetUp_2025_Pas$W0rd$/x86/VSLauncher_[0MB]_[1].exe
    • Size 281KB
    • SHA256 87048cff2227d2901314760618d23917cfbc5cc15fc22dc355e803c5ee5fb211
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      #^FulL_PcSetUp_2025_Pas$W0rd$/x86/api-ms-win-core-processthreads-l1-1-1.dll
    • Size 17KB
    • SHA256 e5ea2c21fb225090f7d0db6c6990d67b1558d8e834e86513bc8ba7a43c4e7b36
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      #^FulL_PcSetUp_2025_Pas$W0rd$/x86/api-ms-win-core-profile-l1-1-0.dll
    • Size 16KB
    • SHA256 d00a0edace14715bf79dbd17b715d8a74a2300f0adb1f3fc137edfb7074c9b0a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      #^FulL_PcSetUp_2025_Pas$W0rd$/x86/api-ms-win-core-rtlsupport-l1-1-0.dll
    • Size 17KB
    • SHA256 d11093fdc1d5c9213b9b2886ce91db3ded17ef8dae1615a8c7ffbc55b8e3f79b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      #^FulL_PcSetUp_2025_Pas$W0rd$/x86/api-ms-win-core-string-l1-1-0.dll
    • Size 17KB
    • SHA256 3807db7acf1b40c797e4d4c14a12c3806346ae56b25e205e600be3e635c18d4f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      #^FulL_PcSetUp_2025_Pas$W0rd$/x86/api-ms-win-core-synch-l1-1-0.dll
    • Size 19KB
    • SHA256 8bb38a7a59fbaa792b3d5f34f94580429588c8c592929cbd307afd5579762abc
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      #^FulL_PcSetUp_2025_Pas$W0rd$/x86/api-ms-win-core-synch-l1-2-0.dll
    • Size 17KB
    • SHA256 9ac63682e03d55a5d18405d336634af080dd0003b565d12a39d6d71aaa989f48
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      #^FulL_PcSetUp_2025_Pas$W0rd$/x86/api-ms-win-core-sysinfo-l1-1-0.dll
    • Size 18KB
    • SHA256 1fe918979f1653d63bb713d4716910d192cd09f50017a6ecb4ce026ed6285df9
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      #^FulL_PcSetUp_2025_Pas$W0rd$/x86/api-ms-win-core-timezone-l1-1-0.dll
    • Size 17KB
    • SHA256 a108a8f20ded00e742a1f818ef00eb425990b6b24a2bcd060dea4d7f06d3f165
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      #^FulL_PcSetUp_2025_Pas$W0rd$/x86/api-ms-win-core-util-l1-1-0.dll
    • Size 17KB
    • SHA256 68bd9c086d210eb14e78f00988ba88ceaf9056c8f10746ab024990f8512a2296
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      #^FulL_PcSetUp_2025_Pas$W0rd$/x86/api-ms-win-crt-conio-l1-1-0.dll
    • Size 18KB
    • SHA256 4aeeae0ac9f6c1b0b8835067ea3b7fc429f353565f18de7858f4ea5d6f72072e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      #^FulL_PcSetUp_2025_Pas$W0rd$/x86/api-ms-win-crt-convert-l1-1-0.dll
    • Size 21KB
    • SHA256 77b69e829bdc26c7b2474be6b8a2382345b2957e23046897e40992a8157a7ba1
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      #^FulL_PcSetUp_2025_Pas$W0rd$/x86/api-ms-win-crt-environment-l1-1-0.dll
    • Size 17KB
    • SHA256 6c9c0dc7b36afe07dfb07dd373fc757ff25df4793e6384d7a6021471a474f0b9
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      #^FulL_PcSetUp_2025_Pas$W0rd$/x86/api-ms-win-crt-filesystem-l1-1-0.dll
    • Size 19KB
    • SHA256 85b1b189ce9e3c6f4d2efdd4cd82b0807f681bea2d28851caaf545990de99000
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      #^FulL_PcSetUp_2025_Pas$W0rd$/x86/api-ms-win-crt-heap-l1-1-0.dll
    • Size 18KB
    • SHA256 0166edfb23cfc77519c97862a538a69b5d805d6a17d6e235f46927af5c04b3c9
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      #^FulL_PcSetUp_2025_Pas$W0rd$/x86/api-ms-win-crt-locale-l1-1-0.dll
    • Size 17KB
    • SHA256 f16447b5fc7fe6fb8a6699a3cef1b2b8ba92d408579bcc272d3dd76acd801e2a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      #^FulL_PcSetUp_2025_Pas$W0rd$/x86/api-ms-win-crt-math-l1-1-0.dll
    • Size 26KB
    • SHA256 c7115159babdaa1f52e478e67b4e612da2332fda4e4036999b29425fe303b6e8
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      #^FulL_PcSetUp_2025_Pas$W0rd$/x86/api-ms-win-crt-multibyte-l1-1-0.dll
    • Size 25KB
    • SHA256 c6b4e1d903b3cc83bfaffbe4e82eee634cff8f97f12217caa45b464ddc4e1455
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      #^FulL_PcSetUp_2025_Pas$W0rd$/x86/api-ms-win-crt-private-l1-1-0.dll
    • Size 68KB
    • SHA256 696c10112d8b86a46e5057cbd0bf40728e79c6bb49cda1f2c67fe45d0fc1258d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      #^FulL_PcSetUp_2025_Pas$W0rd$/x86/api-ms-win-crt-process-l1-1-0.dll
    • Size 18KB
    • SHA256 542a22540cdb7df46d957a0208d50507916f7c737bea833931239d56ebe8d68c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
1/10

behavioral1

persistenceprivilege_escalation
Score
7/10

behavioral2

lummapersistenceprivilege_escalationstealer
Score
10/10

behavioral3

Score
3/10

behavioral4

Score
3/10

behavioral5

Score
3/10

behavioral6

Score
3/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
3/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10