Overview

overview

10

Static

static

3

Setup.exe

windows7-x64

7

Setup.exe

windows10-1703-x64

10

Setup.exe

windows10-2004-x64

10

Setup.exe

windows11-21h2-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    「SetUp・H€RE」✔.zip

  • Size

    8.5MB

  • Sample

    240913-xpws6atdrd

  • MD5

    febd2c81e1dae03a66631e1088336a9b

  • SHA1

    96db28385c2d55d53083a141172cddb719dee108

  • SHA256

    8b471ecd2842d73ba198c31656e895e046bac9bf97f23b1b4339e919a58fff8e

  • SHA512

    9bdf6c67f44c7349f324cfdc813aafbdbb40922ee70d6a56ed817495da98483c29c65073c7fec5fc08de9a287ee90d9eea2360f09be64dbf6758ca8e52ffb1c9

  • SSDEEP

    196608:JyTLu6bGhJHpmf1hD7sLL+IPUATyVIVINcMAnnGBJo1U0FxF7NMlrFRZ:eKHHsf1tsLL3JTyi88xFk/

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://complainnykso.shop/api

https://basedsymsotp.shop/api

https://charistmatwio.shop/api

https://grassemenwji.shop/api

https://stitchmiscpaew.shop/api

https://commisionipwn.shop/api

Targets

    • Target

      Setup.exe

    • Size

      5.4MB

    • MD5

      ad2735f096925010a53450cb4178c89e

    • SHA1

      c6d65163c6315a642664f4eaec0fae9528549bfe

    • SHA256

      4e775b5fafb4e6d89a4694f8694d2b8b540534bd4a52ff42f70095f1c929160e

    • SHA512

      1868b22a7c5cba89545b06f010c09c5418b3d86039099d681eee9567c47208fdba3b89c6251cf03c964c58c805280d45ba9c3533125f6bd3e0bc067477e03ab9

    • SSDEEP

      98304:o/zx+riUDpJowboU+XEsumY2XW6jBYeZ1ER:2x+riUDwUj12X1tY5

    Score
    10/10
    discoverylummastealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks