Overview

overview

10

Static

static

3

SoftwareV.1.3.exe

windows7-x64

10

SoftwareV.1.3.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    SoftwareV.1.3.exe

  • Size

    325KB

  • Sample

    241004-es9kbaxgrg

  • MD5

    da0a13852c8f970fee2867440c8d6ebe

  • SHA1

    5927cfcdb881559110053f568c0545ef7e607e84

  • SHA256

    7c2a0458d57bbff9bad4fdeeec6b02eab4cef38439581ee35fca9c46f7671c27

  • SHA512

    f85d4d6aa8bdd57e73a686828381c54ce5cbc7bbc7265d38f898d63edd247752ea6acbc43cfba66480334ff64ab72375b5c24eff800f47261e63122592da9d18

  • SSDEEP

    6144:yNwxTN5vVXTXC2ZWjKbzez/XcKZ8eMopFKRUfbMIeBTPqbDoCFd22:yMTN5vV22ZgKbovcZeMoiRabMhtq2

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://caffegclasiqwp.shop/api

https://stamppreewntnq.shop/api

https://stagedchheiqwo.shop/api

https://millyscroqwp.shop/api

https://evoliutwoqm.shop/api

https://condedqpwqm.shop/api

https://traineiwnqo.shop/api

https://locatedblsoqp.shop/api

https://froytnewqowv.shop/api

Targets

    • Target

      SoftwareV.1.3.exe

    • Size

      325KB

    • MD5

      da0a13852c8f970fee2867440c8d6ebe

    • SHA1

      5927cfcdb881559110053f568c0545ef7e607e84

    • SHA256

      7c2a0458d57bbff9bad4fdeeec6b02eab4cef38439581ee35fca9c46f7671c27

    • SHA512

      f85d4d6aa8bdd57e73a686828381c54ce5cbc7bbc7265d38f898d63edd247752ea6acbc43cfba66480334ff64ab72375b5c24eff800f47261e63122592da9d18

    • SSDEEP

      6144:yNwxTN5vVXTXC2ZWjKbzez/XcKZ8eMopFKRUfbMIeBTPqbDoCFd22:yMTN5vV22ZgKbovcZeMoiRabMhtq2

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks