Overview

overview

10

Static

static

3

Exitlag.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Exitlag.exe

  • Size

    538KB

  • Sample

    241010-am4pnasbqa

  • MD5

    270d3ee7b991ccf0494e4a0bf80cdade

  • SHA1

    2d1601e8fff3d633d9104b5e945aa453dafba795

  • SHA256

    51dd955d10eba20adee830cc0511f35a0c2414a11a616788ff0509613479ccb5

  • SHA512

    b8f11c70eabf66b6df7b3322db8b58199aa07cc36ea564cd358d354c8a57169bcefe477684e19443d3b403a1d97e1488881d1c23c371ed5b3e776361788bbe99

  • SSDEEP

    12288:utuCLFGWTUwWhZn0FZiqkQSXnOKKGQI4Zn7MNp/SqnKn5AQk4S:uFFGjvaJkxX3KGQIAnw//bEbt

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://wickedneatr.sbs

https://invinjurhey.sbs

https://laddyirekyi.sbs

https://exilepolsiy.sbs

https://bemuzzeki.sbs

https://exemplarou.sbs

https://isoplethui.sbs

https://frizzettei.sbs

https://epiloggati.sbs

Targets

    • Target

      Exitlag.exe

    • Size

      538KB

    • MD5

      270d3ee7b991ccf0494e4a0bf80cdade

    • SHA1

      2d1601e8fff3d633d9104b5e945aa453dafba795

    • SHA256

      51dd955d10eba20adee830cc0511f35a0c2414a11a616788ff0509613479ccb5

    • SHA512

      b8f11c70eabf66b6df7b3322db8b58199aa07cc36ea564cd358d354c8a57169bcefe477684e19443d3b403a1d97e1488881d1c23c371ed5b3e776361788bbe99

    • SSDEEP

      12288:utuCLFGWTUwWhZn0FZiqkQSXnOKKGQI4Zn7MNp/SqnKn5AQk4S:uFFGjvaJkxX3KGQIAnw//bEbt

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks