Overview

overview

10

Static

static

1

e239b11ecd...a3.exe

windows7-x64

10

e239b11ecd...a3.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e239b11ecd605504a33038398cee8cb28bb2b4efff19401e7f5b954035a1cfa3

  • Size

    5.8MB

  • Sample

    240812-kyxetsybnf

  • MD5

    453a744cc00d6773f65ddff499d86bd1

  • SHA1

    65328f291f1f5d07d485b09fad1756cd68b7ba0f

  • SHA256

    e239b11ecd605504a33038398cee8cb28bb2b4efff19401e7f5b954035a1cfa3

  • SHA512

    2ee4e3d24771691fe4399a2f988ead48a2c76e1ff78325b4f06a0fcc83b336ac0fa1316c783e1ad1dc5c05a331ec8751b11d4bfa388f4c06a717dfbdddfede9c

  • SSDEEP

    98304:BdvhxixgrOYvLtWV9SxAPZl+RqgSRe4rcSRhE1RKsJgHXe8id+/NzTE6Qup:zhQqrvvySshgSsR/mOjoNVQup

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

Extracted

Family

lumma

C2

https://movedwithdrwiaso.shop/api

https://unseaffarignsk.shop/api

https://shepherdlyopzc.shop/api

https://upknittsoappz.shop/api

https://liernessfornicsa.shop/api

https://outpointsozp.shop/api

https://callosallsaospz.shop/api

https://lariatedzugspd.shop/api

https://indexterityszcoxp.shop/api

https://tenntysjuxmz.shop/api

Targets

    • Target

      e239b11ecd605504a33038398cee8cb28bb2b4efff19401e7f5b954035a1cfa3

    • Size

      5.8MB

    • MD5

      453a744cc00d6773f65ddff499d86bd1

    • SHA1

      65328f291f1f5d07d485b09fad1756cd68b7ba0f

    • SHA256

      e239b11ecd605504a33038398cee8cb28bb2b4efff19401e7f5b954035a1cfa3

    • SHA512

      2ee4e3d24771691fe4399a2f988ead48a2c76e1ff78325b4f06a0fcc83b336ac0fa1316c783e1ad1dc5c05a331ec8751b11d4bfa388f4c06a717dfbdddfede9c

    • SSDEEP

      98304:BdvhxixgrOYvLtWV9SxAPZl+RqgSRe4rcSRhE1RKsJgHXe8id+/NzTE6Qup:zhQqrvvySshgSsR/mOjoNVQup

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks