Overview

overview

10

Static

static

3

d3d9.dll

windows7-x64

3

d3d9.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d3d9.dll

  • Size

    476KB

  • Sample

    240914-yhcx5ssdlk

  • MD5

    f7090993aac7e44421abf53b3977805f

  • SHA1

    7354b0d7533bc49f530ec389da077381e76dac39

  • SHA256

    7ae53b42f4f93f83959925389f4e578110ca08ec68ec4db680aef0112ff50fbb

  • SHA512

    bbc17496c2b6c727149fb52de8cb930a8cc71758dc27917b962b6e5d7a0430f4d93c1a0d0fc19f454240cd43c32d73b771b75b6eedaee57be214aa5ef17d2c22

  • SSDEEP

    12288:pgIFN/dmC1rayDPbkfPa5oSQ+6oiRgf+E/JrX:pgIFekraynoPaG+6ogFE

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://warrantelespsz.shop/api

https://unseaffarignsk.shop/api

https://shepherdlyopzc.shop/api

https://upknittsoappz.shop/api

https://liernessfornicsa.shop/api

https://outpointsozp.shop/api

https://callosallsaospz.shop/api

https://lariatedzugspd.shop/api

https://indexterityszcoxp.shop/api

Extracted

Family

lumma

C2

https://warrantelespsz.shop/api

Targets

    • Target

      d3d9.dll

    • Size

      476KB

    • MD5

      f7090993aac7e44421abf53b3977805f

    • SHA1

      7354b0d7533bc49f530ec389da077381e76dac39

    • SHA256

      7ae53b42f4f93f83959925389f4e578110ca08ec68ec4db680aef0112ff50fbb

    • SHA512

      bbc17496c2b6c727149fb52de8cb930a8cc71758dc27917b962b6e5d7a0430f4d93c1a0d0fc19f454240cd43c32d73b771b75b6eedaee57be214aa5ef17d2c22

    • SSDEEP

      12288:pgIFN/dmC1rayDPbkfPa5oSQ+6oiRgf+E/JrX:pgIFekraynoPaG+6ogFE

    Score
    10/10
    discoverylummastealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks