Overview

overview

10

Static

static

3

cdcf164d5d...05.exe

windows7-x64

3

cdcf164d5d...05.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cdcf164d5d8fac1ce015d142cf83e105.exe

  • Size

    940KB

  • Sample

    240722-egsgnawcqa

  • MD5

    cdcf164d5d8fac1ce015d142cf83e105

  • SHA1

    4e756096ea69f275d9a24e03a1aed87bec4fe537

  • SHA256

    d84f31e8e141835f1e65f0ab1493e0993c1d33ed6ff551d5f6c2907e51bcc927

  • SHA512

    58ba2a2d434c5f06164de8ecc52f8ff875796fc8a622695a3a3945c2497d3afbdc8130280fc65d547c9228eb3217866987986356bc0b3c341a887e3ea9c2d82b

  • SSDEEP

    24576:0ws5Lw7d1MsCFv4nWTwrd71HRH9Ip8XjxnRx+su2y0/p:YIMsCFv4nFL19Ip8XFnREt2zp

Score
10/10
lummastealer

Malware Config

Extracted

Family

lumma

C2

https://unseaffarignsk.shop/api

https://shepherdlyopzc.shop/api

https://upknittsoappz.shop/api

https://liernessfornicsa.shop/api

https://outpointsozp.shop/api

https://callosallsaospz.shop/api

https://lariatedzugspd.shop/api

https://indexterityszcoxp.shop/api

https://reinforcedirectorywd.shop/api

Targets

    • Target

      cdcf164d5d8fac1ce015d142cf83e105.exe

    • Size

      940KB

    • MD5

      cdcf164d5d8fac1ce015d142cf83e105

    • SHA1

      4e756096ea69f275d9a24e03a1aed87bec4fe537

    • SHA256

      d84f31e8e141835f1e65f0ab1493e0993c1d33ed6ff551d5f6c2907e51bcc927

    • SHA512

      58ba2a2d434c5f06164de8ecc52f8ff875796fc8a622695a3a3945c2497d3afbdc8130280fc65d547c9228eb3217866987986356bc0b3c341a887e3ea9c2d82b

    • SSDEEP

      24576:0ws5Lw7d1MsCFv4nWTwrd71HRH9Ip8XjxnRx+su2y0/p:YIMsCFv4nFL19Ip8XFnREt2zp

    Score
    10/10
    lummastealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks