General

  • Target
    setup.exe
  • Size 12.5MB
  • Sample240705-scpf4ashkd
  • SHA256 15f779bef759b5566c409ab78d4fe244dc224c669cf3f67b0b93f89520261ae7
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • lumma

C2
  • https://bannngwko.shop/api

Targets

    • Target
      setup.exe
    • Size 12.5MB
    • SHA256 15f779bef759b5566c409ab78d4fe244dc224c669cf3f67b0b93f89520261ae7
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks