General

  • Target
    github.software.1.3.6.exe
  • Size 21.5MB
  • Sample240709-cq5r8stdpe
  • SHA256 97bb4ce1bc7351f928dde0a74f4e6a554769a948ebb26184d1d2734a574a7364
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • lumma

C2
  • https://nobledpcowep.shop/api

Targets

    • Target
      github.software.1.3.6.exe
    • Size 21.5MB
    • SHA256 97bb4ce1bc7351f928dde0a74f4e6a554769a948ebb26184d1d2734a574a7364
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks