Overview

overview

10

Static

static

3

Set-up.exe

windows7-x64

10

Set-up.exe

windows10-2004-x64

10

WebUI.dll

windows7-x64

3

WebUI.dll

windows10-2004-x64

3

x64/Templa...te.htm

windows7-x64

3

x64/Templa...te.htm

windows10-2004-x64

3

x64/plugin...ns.dll

windows7-x64

1

x64/plugin...ns.dll

windows10-2004-x64

1

x64/plugin...ns.dll

windows7-x64

1

x64/plugin...ns.dll

windows10-2004-x64

1

x64/plugin...ns.dll

windows7-x64

1

x64/plugin...ns.dll

windows10-2004-x64

1

x64/plugin...ns.dll

windows7-x64

1

x64/plugin...ns.dll

windows10-2004-x64

1

x64/plugin...re.dll

windows7-x64

1

x64/plugin...re.dll

windows10-2004-x64

1

x64/plugin...po.dll

windows7-x64

1

x64/plugin...po.dll

windows10-2004-x64

1

x64/plugin...ns.dll

windows7-x64

1

x64/plugin...ns.dll

windows10-2004-x64

1

x64/plugin...ns.dll

windows7-x64

1

x64/plugin...ns.dll

windows10-2004-x64

1

x64/plugin...ns.dll

windows7-x64

1

x64/plugin...ns.dll

windows10-2004-x64

1

x64/plugin...me.dll

windows7-x64

1

x64/plugin...me.dll

windows10-2004-x64

1

x64/plugin...io.dll

windows7-x64

1

x64/plugin...io.dll

windows10-2004-x64

1

x64/plugin...to.dll

windows7-x64

1

x64/plugin...to.dll

windows10-2004-x64

1

x64/plugin...me.dll

windows7-x64

1

x64/plugin...me.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    8ef69b1fb9fb7a565ea2a1b8873bc5b4851f644f978fc54e1cc49d05ff4250da.zip

  • Size

    23.0MB

  • Sample

    240908-d1vwfstbnp

  • MD5

    ddcfcd9b586f9cbdf6fa160c48c52b30

  • SHA1

    649b91d756febef194e9172e7c96cfca5613d09b

  • SHA256

    8ef69b1fb9fb7a565ea2a1b8873bc5b4851f644f978fc54e1cc49d05ff4250da

  • SHA512

    87ff6b3783099a1c6742f7f5e3b9c29453e668252a6dbd5b11e1a8a14924115b6ebd4172afffec03bcadd942aa27d22de23c42947cde2b36ed61cf5618fa5d65

  • SSDEEP

    393216:nZrsui+tOwZjagHjMw/PLixFGmw06hc3m1LOhnmBII6ftw0CNt8R3QULx2FyNx:ZTeuvXLiLGnnLO2hiw0CVFCx

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://bassicnuadnwi.shop/api

https://condedqpwqm.shop/api

Targets

    • Target

      Set-up.exe

    • Size

      1.8MB

    • MD5

      098ac4621ee0e855e0710710736c2955

    • SHA1

      ce7b88657c3449d5d05591314aaa43bd3e32bdaa

    • SHA256

      46afbf1cbd2e1b5e108c133d4079faddc7347231b0c48566fd967a3070745e7f

    • SHA512

      3042785b81bd18b641f0a2b5d8aec8ef86f9bf1269421fb96d1db35a913e744eaff16d9da7a02c8001435d59befb9f26bc0bbfa6e794811abf4282ed68b185fe

    • SSDEEP

      49152:GpjwrP6yVgBd39sUUzFti4aTotmIT3SxLmNKbx:GpjwrP6yKTOUmi4aTo1NK9

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      WebUI.dll

    • Size

      7.6MB

    • MD5

      a29a218642f0024d9061df45ea1bae07

    • SHA1

      3a97711c99dad00ae86be55edab74912f9be55ad

    • SHA256

      74dc92efc8279b770319549e818bbb5df711121e7eb9c7a0d54b4ff74d08d037

    • SHA512

      b55235ca3caf48a29a4cc1743bb8aa580ef8248b3999be29fc82097c22a68ced12f813bef6be46765651b478616da1d4704d36a4581a04b40cc048e220647390

    • SSDEEP

      196608:L39zxBBmYeZ12U8Blc/OwDlcXus9Y0SJsv6tWKFdu9CZ:Jzx6YeZ12TBlc/OwDlikJsv6tWKFdu9C

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      x64/Templates/TemplateCorreoCliente.htm

    • Size

      2KB

    • MD5

      ce4c1f3ba9e690c4119e8ed39aa8eb78

    • SHA1

      dc2da00c92b51431c01c5e598de4665c9989e856

    • SHA256

      e17621dc67919e53a0d1be6a03fa0d97f01c8932f8d8912d556327e620310432

    • SHA512

      daf95e6329b060fe230096fc7a594cf0a13801e2dcf9869affa5530a2d03bf6c0dd2d9340be5c312b82d41dad48057f86811a23b23fba93b0dc9a478986ac4ef

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      x64/plugins/MahApps.Metro.IconPacks.BootstrapIcons.dll

    • Size

      2.1MB

    • MD5

      8a999c6c4b38e3afef0b54cbd84180c6

    • SHA1

      991b865b6dca9ead7d47dfb22faf584fea276044

    • SHA256

      73e67b8a6607064c314b0a5d72def055ae0599beae1e7073d7a10626543d7fd0

    • SHA512

      030fcb028335a62ea7c05053835c09016643bc2a941537a7a3dd97913cbc7f6c501e6ad3fb24fda4064d5ed08ed59702d911d7c9aa3f840e12e6db843464236d

    • SSDEEP

      6144:CTuzE29sK1y7RQNsMse5AV54EFdxtkYVBQoahtxDfzjADAW4vBM9jd2e+pT9IaRr:4uzEBA

    Score
    1/10
    behavioral7behavioral8

    • Target

      x64/plugins/MahApps.Metro.IconPacks.BoxIcons.dll

    • Size

      2.0MB

    • MD5

      c01837735db98ade25e996c8fec33bf6

    • SHA1

      626cc39c077942f70b72795e999a14d8729a7298

    • SHA256

      7b28873c6b729262f6f02ff2da46ca4aeaebcf3799eabd460bfbbf4a0fcf01ca

    • SHA512

      6bce692e3bc1304b518a9b47244af4e689ab81362906c3cebf732db0eced533bbf5c9f3a779614f6b258e087b7cbe762a37a68373b4749f7c30ec330984a6f05

    • SSDEEP

      12288:NbuZ0HSkOZo/IMCPY3sgUVhv9Rhz4iamcXw9320uVBi0KwxWjYyF:o

    Score
    1/10
    behavioral10behavioral9

    • Target

      x64/plugins/MahApps.Metro.IconPacks.Codicons.dll

    • Size

      559KB

    • MD5

      7f92130abd27092c78a3e075334bb75e

    • SHA1

      14f0cf7594d998d35762e7ada89143601b222613

    • SHA256

      a22950cc45540743ac0feae232c4cffeb25baa54ac3604765907e849ddad25ec

    • SHA512

      68e23a47a5700dd84ab6b602842d723056cc26db12a7d70336da4c5ee0372cd95883da7232a2527fea21669f82fc1a44afb647b6bf25084dd78174e25ed724f0

    • SSDEEP

      6144:2tdYnKgBzqqrTzWBzqqrUzQ7M1L1MyzpmeJ4O:26O

    Score
    1/10
    behavioral11behavioral12

    • Target

      x64/plugins/MahApps.Metro.IconPacks.Coolicons.dll

    • Size

      451KB

    • MD5

      14f3f599e7a67c95d779820dba5a9fff

    • SHA1

      b88ea6caa09ecf11d2e6dbae039ab0734a823345

    • SHA256

      213956439f1d224be2f78ae9a345e2c02902750cd83a4a0439234afe801e75e5

    • SHA512

      e295ab8f8d90208f6a41320868d73a225a12bedc15591f2a19103a659fb437016ebded0c8fd62c61db3a8dadaafb07565cb76a51fd4113acd20cd568e36807a2

    • SSDEEP

      6144:Psu6HHHYtONor0Gw90Lx5FkbrawYhhGqlQz08aWFe/HD6TYm5oE3e3FsPgiu9g3z:P1774BfdWECoBmW

    Score
    1/10
    behavioral13behavioral14

    • Target

      x64/plugins/MahApps.Metro.IconPacks.Core.dll

    • Size

      19KB

    • MD5

      b705c478c096ef8ea4fc0738d52d1c84

    • SHA1

      44ec80a1259df99ac06cc342b03ca0fb9db22faf

    • SHA256

      b6156814d7014a38587991b19eec9228439bc0b2558cfa9bedb4e72ac611fccb

    • SHA512

      f212cde6c87920b3ee6e588c473987646c3f6ddca4b2122dd876ff61815dc7dccbbcb469024fd50cb0f3e1829643859e3eec4c8a91442056624c6f5922344b35

    • SSDEEP

      384:feCnIM4AZxFYzXKZHqwAodV5rroIYJFzcQ8tFq3qs6jUasojg4APsTTlj5a6wIYU:feu4RIDfov4bFyUjUnWsKGVD6

    Score
    1/10
    behavioral15behavioral16

    • Target

      x64/plugins/MahApps.Metro.IconPacks.Entypo.dll

    • Size

      490KB

    • MD5

      60aaa132d1992d132f7fbaef8cd0ccb3

    • SHA1

      6f7d9226d195efed993cae4a2ea447e125ce1d23

    • SHA256

      1017345eeae7e6df2b894c36ebad15f469474ca612749c9e1865126175c74364

    • SHA512

      1e82f82144674cf5591a1ead06f8d37b5dad11f16114c70664cd2891f6b32ef23ae543e34320105407e57d48543faa2286a8d8ff21dfa7076be3c18808d3a3ea

    • SSDEEP

      6144:5bworP4b71rPwhET9FDsBGZfiqJMUlOv5CuwVpKex7byEZAzftaDi/KAFwrSmfLM:9wKRLLKACX2m

    Score
    1/10
    behavioral17behavioral18

    • Target

      x64/plugins/MahApps.Metro.IconPacks.EvaIcons.dll

    • Size

      416KB

    • MD5

      721f37645c32653200b06969419344b2

    • SHA1

      ba5a3868632e98adef61c7a2999e726881eca4a7

    • SHA256

      14d31cdf80fab1df0f874e4f8d8090b5393b6ffac6cd86dfb5c71dd8f62f4e93

    • SHA512

      f3d8375d2df69fce7e4dbff68295281a94cdce9de86ef52aa951c7d2ff8cad48777a76192d6a20f0b804b307d48914f66fcff7bc25da2ab946de456079db59db

    • SSDEEP

      3072:esRQOZCZi9zOr8G2OIC5kXgRXgFmrUjwD:/RQwLbmW+

    Score
    1/10
    behavioral19behavioral20

    • Target

      x64/plugins/MahApps.Metro.IconPacks.FeatherIcons.dll

    • Size

      106KB

    • MD5

      0cb966a395147c28dd9abf5482ae64fc

    • SHA1

      81a657e20670a8cb120270047cae1f552ba40100

    • SHA256

      fa81d23b3ebf44d72897d673dfd750ae764de32d8d05888e77d80018e041156b

    • SHA512

      e58f13389f8e229ad44625320948f8fe1cbf469980c8774c1f8ecd4228edd8039af3e361ccec91ae011460801169eb85e8aa1eebe2be2282cb8b6d7944c36f2f

    • SSDEEP

      3072:7QVRLunLLLaDLQv4xLi/CLU9d+AHXkusnqyKM/6dNzj23T2rB6ibsKwGv6mBhZQ:AikuVdNzj23Vmbe

    Score
    1/10
    behavioral21behavioral22

    • Target

      x64/plugins/MahApps.Metro.IconPacks.FileIcons.dll

    • Size

      2.5MB

    • MD5

      7505de114074730c17bfdca7e7c5657d

    • SHA1

      72285ce3d75c803a4f2cb7244dbc5f6ea6b6e7c2

    • SHA256

      6b876cc6e22e1bb6a9a7bc862c043aa49926760714a6d92122e436b561a659cb

    • SHA512

      10cf63aa781d948b07d4bfb02fc66c5b72328d9fb9f8e6d4b5816c54851777f8e276b196693b17a14998f21387cdd030fd2bda067c0547fca366e651397cd65a

    • SSDEEP

      12288:Z88jUgEwEUkTS0B2gO32lSYGVHfkbuBzNl6iK4LbBzuqbBuQ0bCLf7PQGI0iFzmk:jhxyU

    Score
    1/10
    behavioral23behavioral24

    • Target

      x64/plugins/MahApps.Metro.IconPacks.FontAwesome.dll

    • Size

      2.3MB

    • MD5

      5214c8c29b814c62a89424429933d78e

    • SHA1

      ae62844a871389cfa1f36152621d896286f67872

    • SHA256

      dbf78865859b0776df2458aa7f490d66e1b54104873063e99f4b9a4d9d59accc

    • SHA512

      bbb9a7ecbb95170a409b31a73ecb875938bf8ba29d5b470764208b9d6a41f447d23958f907d1a871218567186e78f4175ebd2a08112e26c1c8c99af29c8dc535

    • SSDEEP

      24576:fojPJMpMIU11zYHfa//KM6sA/lUPKHMhY+4Pv6P/Mzk6A/MBn/MBY6k94PEeB7Bc:fojPJMu

    Score
    1/10
    behavioral25behavioral26

    • Target

      x64/plugins/MahApps.Metro.IconPacks.Fontaudio.dll

    • Size

      398KB

    • MD5

      086160aa7449ea0d3c89393289d6cf3c

    • SHA1

      f0fd895ced7e9c2c96943754bebd66fefe6f9595

    • SHA256

      8d6da96f5612060f6ebdd76874c5dc52528665664f148d290697bf12cf884c3d

    • SHA512

      85a4472f1b7b49a2512a5ac046fc7c6f501f4ded12671b94f02dbe424146852160c4aa19254aee6fc435e2ecb3547378ff2d484d00f9f882e79399a1470d303a

    • SSDEEP

      3072:4KbKfVf+WDio/2G8K0b1+oxzsf+RSyXQfKZsyQQv0VndywQImZXZsU2ynIySoAYk:72ioilfc5dywHmZJt2SSCOROSJPmlu

    Score
    1/10
    behavioral27behavioral28

    • Target

      x64/plugins/MahApps.Metro.IconPacks.Fontisto.dll

    • Size

      2.7MB

    • MD5

      3e3f7e5dec93557b5c00e750b008dc23

    • SHA1

      bf0fa3e913e15c2090caa238361094029d3e1de2

    • SHA256

      98fdfd6e8fabd67e9af84453f4942333002d809f45184b04db04060d61dc40ba

    • SHA512

      331f867a0fdc51bfd8506c4d70f6cb867c90b122632e4392a59b0321fb8f51b4d840540f7029f30bef87bc72e92b51031ff9c522670082ebe97001bb6091ff5d

    • SSDEEP

      12288:0KlPHWdRGyp9TZhvbfN8Meppp/z5RTl215hG9g7wJDZNsJ6TmGpkNOFEIH7/deH5:0Klz77FG

    Score
    1/10
    behavioral29behavioral30

    • Target

      x64/plugins/MahApps.Metro.IconPacks.ForkAwesome.dll

    • Size

      1.0MB

    • MD5

      afd3000ebb93066adf25e1cbb1a8cea2

    • SHA1

      f60cae59ceb4a91293fd5f0b976b3b518344465b

    • SHA256

      4c245aad2d0b737bd71bbed74f13e680761f555f34d68a71a952b36e1b6c07fd

    • SHA512

      87c985c2b6f692af978829bb5004550531f5f2bbe0b33e670b4923b6b1ce87b67cbc0f8497285c740e81fe3975219f7f748da3aab478867868441dbf43f9ce2f

    • SSDEEP

      12288:z6+zsd+TlD2jsdXbjc7DeCmLp5M2YQeB1gOR95CYF323Jd3vrW27M:F

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

lummadiscoverystealer
Score
10/10

behavioral2

lummadiscoverystealer
Score
10/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10