Extracted

Extracted

Extracted

Extracted

• • Target

    07e1fe19e20043c5edd0ffecee3d322070c725b88513f60eeb329f0a2711b819

  • Size

    403KB

  • MD5

    a5d8786e0b524918c35e579be77304b9

  • SHA1

    3fdcc3304930caf5e2be53172380dd34365c0d5a

  • SHA256

    07e1fe19e20043c5edd0ffecee3d322070c725b88513f60eeb329f0a2711b819

  • SHA512

    dd2a8f5efa33cecb8a761c8783f18a90e3a7760e9b297a998e923b9bd09cd883b2b973a29f5339a49cd6aeaf99146a466524105e3a62f1012269f8aeb165521e

  • SSDEEP

    12288:EKbMBW6swhEIGz3BfWxr+ht81hHDgMfF/+MEO:DhwiIGz3xWchSfHDgMfF/Vt

  Score

  10^/10

  lummavidard80be45a1eb6454ca916f92c36ebf67de90840a846d017e7b095f7543cdf2d15credential_accessdiscoveryevasionpersistenceprivilege_escalationspywarestealer

  • Detect Vidar Stealer

    stealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Modifies Windows Firewall

    evasion

  • Server Software Component: Terminal Services DLL

    persistence

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Modifies WinLogon

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2