Overview

overview

10

Static

static

3

Set-up.exe

windows7-x64

10

Set-up.exe

windows10-1703-x64

10

Set-up.exe

windows10-2004-x64

10

Set-up.exe

windows11-21h2-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    𓃗-❀#❀La-te-st-❀-Se-t-up-❀-Pas$-》》#❀9192❀#-𓃗.zip

  • Size

    7.9MB

  • Sample

    240908-wch6vsyerj

  • MD5

    8916f5503d3b2a59451151f6e1b3ff1d

  • SHA1

    65e1aafdd69d9103d58f3a39c6f0bec4760fd566

  • SHA256

    62c2985f053b9535aa1c8d97c9d034736f88b0f19d1b46331a4e644e4c47a576

  • SHA512

    57c45c28ef7c5ed888b87d17b5103ecdd9c2cf52007a62a98f23cf2115002915a8fbc65f3ef8054409c8129b67c8c3a2247b59d88bc790550c2a55d0c9bd56e6

  • SSDEEP

    196608:i/7ZhJHpmf1XD7WLX+IPUATyVIVINcM/o1U0FxF7NMlrsOB:i/1HHsf1nWLX3JTyi8oxFTs

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://tenntysjuxmz.shop/api

Targets

    • Target

      Set-up.exe

    • Size

      5.4MB

    • MD5

      ad2735f096925010a53450cb4178c89e

    • SHA1

      c6d65163c6315a642664f4eaec0fae9528549bfe

    • SHA256

      4e775b5fafb4e6d89a4694f8694d2b8b540534bd4a52ff42f70095f1c929160e

    • SHA512

      1868b22a7c5cba89545b06f010c09c5418b3d86039099d681eee9567c47208fdba3b89c6251cf03c964c58c805280d45ba9c3533125f6bd3e0bc067477e03ab9

    • SSDEEP

      98304:o/zx+riUDpJowboU+XEsumY2XW6jBYeZ1ER:2x+riUDwUj12X1tY5

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks