Overview

overview

10

Static

static

1

modest-menu.exe

windows7-x64

10

modest-menu.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    modest-menu.exe

  • Size

    2.5MB

  • Sample

    240914-l168gsybjj

  • MD5

    d881547121335440ca6f3d35735d7ad2

  • SHA1

    7f5f337ba5ec73bc03094396d86cd4c328a8c735

  • SHA256

    3019ad0dd1361cdf24a6286196c69c18a44ec336538d44ccf2fda496c2c959a3

  • SHA512

    98e14d9956565bde7bd13b3871d4eeaa774b93dabd6159d0dab8e2cd61a3194c78544e4858ef3219f8e789f72a5d60f328ff784677a7290ee412147d75003dbd

  • SSDEEP

    49152:aBYW2WpEK09Eu0YovdTWZzX2Xfom7SHzuy+TP4z0TCubCaR9NyFfvca3tu4l1gcE:5WXWKCyiZzX2vomTymt2ueaRaMCu4wcE

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://affecthorsedpo.shop/api

https://bouncedgowp.shop/api

https://bannngwko.shop/api

https://bargainnykwo.shop/api

https://radiationnopp.shop/api

https://answerrsdo.shop/api

https://publicitttyps.shop/api

https://benchillppwo.shop/api

Extracted

Family

lumma

C2

https://affecthorsedpo.shop/api

Targets

    • Target

      modest-menu.exe

    • Size

      2.5MB

    • MD5

      d881547121335440ca6f3d35735d7ad2

    • SHA1

      7f5f337ba5ec73bc03094396d86cd4c328a8c735

    • SHA256

      3019ad0dd1361cdf24a6286196c69c18a44ec336538d44ccf2fda496c2c959a3

    • SHA512

      98e14d9956565bde7bd13b3871d4eeaa774b93dabd6159d0dab8e2cd61a3194c78544e4858ef3219f8e789f72a5d60f328ff784677a7290ee412147d75003dbd

    • SSDEEP

      49152:aBYW2WpEK09Eu0YovdTWZzX2Xfom7SHzuy+TP4z0TCubCaR9NyFfvca3tu4l1gcE:5WXWKCyiZzX2vomTymt2ueaRaMCu4wcE

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks