lumma | b8e8a98af2e41ea76445bf055b124553bddd2311d7765cfddaa0b8137ef2b48f | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
b5bd7e9f8bc407ffee120057489f7f52.zip
Size 24.2MB
Sample241011-hr3bdswcmn
SHA256 b8e8a98af2e41ea76445bf055b124553bddd2311d7765cfddaa0b8137ef2b48f
MD5 b5bd7e9f8bc407ffee120057489f7f52
SHA1 93f6f41098dec28971277ad7046aa0bf9a140523
SHA512 f83772005eaa7dea1de3033ec569145a130a13e98e6eeb6dc4da44a85d7796e104eb8b6ae8f0dba12cbe61419d4f30d588bb950c75cb6afc259885e9799f1d3c
SSDEEP 393216:N1nSX39Cn4HTESwiEzhnQOZj5twAqwIrFg31qwp10HRrdElvoclFYTQSXyrFg31W:N1K1A1imhQO1vwAi6x1mwocl2G6x1I
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

lumma discovery stealer

Malware Config

Extracted

Family

lumma

C2

https://wickedneatr.sbs
https://invinjurhey.sbs
https://laddyirekyi.sbs
https://exilepolsiy.sbs
https://bemuzzeki.sbs
https://exemplarou.sbs
https://isoplethui.sbs
https://frizzettei.sbs
https://basizuw.buzz

Targets

- Target
  Register.dll
- Size 1.0MB
- SHA256 372b14fce2eb35b264f6d4aeef7987da56d951d3a09ef866cf55ed72763caa12
- MD5 40b9628354ef4e6ef3c87934575545f4
- SHA1 8fb5da182dea64c842953bf72fc573a74adaa155
- SHA512 02b0ea82efbfbe2e7308f86bfbec7a5109f3fe91d42731812d2e46aebedce50aabc565d2da9d3fbcd0f46febbff49c534419d1a91e0c14d5a80f06b74888c641
- SSDEEP 24576:k0Rdvjw14ZCWQuTs54Qbz27j7BS2Nv+4BT8+u60:BDZ2zAj7pXT3i
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  Set-up.exe
- Size 3.5MB
- SHA256 3dbdf3bca365811e23299b43d5578088dc545d6ac2692552c1483244f97392d4
- MD5 fa2a8da7a01b532d22621256a8768d34
- SHA1 a2e02598b9a5041a08e7a11fd35128f963e47bd7
- SHA512 3d69bfeff5d98ce2f6973a11d27e1e32fa90b7fa5805f013e5f7202d2152159e031b6755e1b8ea75cee8ff971141e402f38839df48cde3dbf9f2b3117f56ff6a
- SSDEEP 98304:8OkzE6or4nv7wDWnNuYSG5l2R1sh12T+FLOAkGkzdnEVomFHKnPSpOUS:SZSF1sh1E+FLOyomFHKnPSUh
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

lumma discovery stealer
- Lumma Stealer, LummaC
  Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
  stealer lumma
behavioral3 behavioral4
- Target
  libvlccore.dll
- Size 2.6MB
- SHA256 9126d9abf91585456000fffd9336478e91b9ea07ed2a25806a4e2e0437f96d29
- MD5 e25413bb41c2f239ffdd3569f76e74b0
- SHA1 073e2a86c5c24ede4c4ad2d8614261121a8d2661
- SHA512 37b8339555dcf825a2e27464eb1d101f8e4b56460d1b78161e99ba6761f1a967668f11ba888a712c878d468f419a455dbc5e8e55e7fb9d4fbc87cb78f500ea9f
- SSDEEP 49152:hDWA3C12sNU/wEz2tMEjv9DZWtxfc1lVG3QNVBAUZLYasUpGaXBuQQ9umM:t3O2wEz2tMEj1lWtOrVG3QNVBAUZLX/
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  resource_/Font/Pfm/Locals/x64/AdonisUI.ClassicTheme.dll
- Size 287KB
- SHA256 8103f2cce6a864ceefe6c5b0c05087ac85ab04a2abf150e93bc9db90c54d9d20
- MD5 8a1b183bca062f48402c74f2daba7b92
- SHA1 d9417bf78b3b37d668c08e67f3c0f21dbc6dc11e
- SHA512 0f5120fa9ed24d2a49b82cdc62113302002ccc5e1cf389cc28830f36b2915f876bdf77094fa6dfa312fc01b6f482465297fa734509511fa7e72285569ce57e87
- SSDEEP 6144:aMNTja9KIKf5RCs1ussMKlzI5iJQn9gu5DPOvObo:5Za9KIjs1ussMKlzI5lo
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7 behavioral8
- Target
  resource_/Font/Pfm/Locals/x64/AdonisUI.dll
- Size 164KB
- SHA256 db46b6106dc1b30041ce3f287ded91166895ff3f1928250fc79dd46c444b1e45
- MD5 3d4c8b6aad28ec574e56ccda22b34ef3
- SHA1 bc22ac7097e597fba3d7367b2fd5c61adff28941
- SHA512 fc56241e65dc7bcc678a2af92f79bda017ceb3f7c4f203c7e9ce753d573da868608a6f56545c0d181a625737278b7b73223e5dcce85bf1f3c5b7b1b06e5c5739
- SSDEEP 3072:fuZPAdWKbu3355s555GPQKljrKxX0yAbTxin1YzqHf0llbS1sjZ73h39Iwj:GydWDrKxG3h39Iw
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral9
- Target
  resource_/Font/Pfm/Locals/x64/SQLite.Interop.dll
- Size 1.7MB
- SHA256 9309fb2a3f326d0f2cc3f2ab837cfd02e4f8cb6b923b3b2be265591fd38f4961
- MD5 56a504a34d2cfbfc7eaa2b68e34af8ad
- SHA1 426b48b0f3b691e3bb29f465aed9b936f29fc8cc
- SHA512 170c3645083d869e2368ee16325d7edaeba2d8f1d3d4a6a1054cfdd8616e03073772eeae30c8f79a93173825f83891e7b0e4fd89ef416808359f715a641747d7
- SSDEEP 24576:YPUxmkgSxPgobZPRjZ22H6edtOZzWySRO3mlE0i/Yl5P+qF+8k+ao/si6:8UxXPgo8e6WYBSJZSS5P97I
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11 behavioral12
- Target
  resource_/Font/Pfm/Locals/x86/BouncyCastle.Crypto.dll
- Size 3.2MB
- SHA256 e51721dc0647f4838b1abc592bd95fd8cb924716e8a64f83d4b947821fa1fa42
- MD5 0cf454b6ed4d9e46bc40306421e4b800
- SHA1 9611aa929d35cbd86b87e40b628f60d5177d2411
- SHA512 85262f1bc67a89911640f59a759b476b30ca644bd1a1d9cd3213cc8aae16d7cc6ea689815f19b146db1d26f7a75772ceb48e71e27940e3686a83eb2cf7e46048
- SSDEEP 49152:JIBbo0WIgmjljFtXCdRLRBcJd+KaGxHIkMNqzP56O8lZ7qXUqi9Y:6BbBWIgWljGxRB/LLY
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14
- Target
  resource_/Font/Pfm/Locals/x86/SQLite.Interop.dll
- Size 1.3MB
- SHA256 83f332ea9535814f18be4ee768682ecc7720794aedc30659eb165e46257a7cae
- MD5 8be215abf1f36aa3d23555a671e7e3be
- SHA1 547d59580b7843f90aaca238012a8a0c886330e6
- SHA512 38cf4aea676dacd2e719833ca504ac8751a5fe700214ff4ac2b77c0542928a6a1aa3780ed7418387affed67ab6be97f1439633249af22d62e075c1cdfdf5449b
- SSDEEP 24576:eiDAYMz2epP8AEXn8z7qsyb8c+gntHKuvKtBLtTvD0nsrFSK96fYlYyv:1AYMza36enEuyjpTV96A2yv
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  resource_/Font/Pfm/opengl64.dll
- Size 145.8MB
- SHA256 e7d625cf255360b0ea96a52ca990be6f1cef522ff7440393e45b12793ac88031
- MD5 71466589eb444bbf272c0f5c920c57f0
- SHA1 4fcace49ee032779d3bf7b8e03c6a9f29ed871ba
- SHA512 eff62450cf03d72af2594d750a70b008226fa2e46216661716287639bf5e1ff1303076fdaf4f062ca4098ef10a8e29502de55ecb3a6e04753aad7fcad01e3352
- SSDEEP 48:0ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZY:n
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral17 behavioral18
- Target
  resource_/Register.dll
- Size 1.0MB
- SHA256 372b14fce2eb35b264f6d4aeef7987da56d951d3a09ef866cf55ed72763caa12
- MD5 40b9628354ef4e6ef3c87934575545f4
- SHA1 8fb5da182dea64c842953bf72fc573a74adaa155
- SHA512 02b0ea82efbfbe2e7308f86bfbec7a5109f3fe91d42731812d2e46aebedce50aabc565d2da9d3fbcd0f46febbff49c534419d1a91e0c14d5a80f06b74888c641
- SSDEEP 24576:k0Rdvjw14ZCWQuTs54Qbz27j7BS2Nv+4BT8+u60:BDZ2zAj7pXT3i
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  resource_/glioma.asp
- Size 1.4MB
- SHA256 7cddf32de8b02b3ecf42c50ded8593770c5ab96d76247155f28d1d3cc87a541f
- MD5 99083617f7139ee9ad5d6b719286ac3a
- SHA1 78af90e2bf04d41a9839526b00630d439fecafe0
- SHA512 a54ef634f43190fcf83eb1967b55e3e90a310c48ed0c8350de86a92be623f5502ab335e7a70cdfa8f126b3570b164781cfb625679741e6224976726655bf35ab
- SSDEEP 24576:qlHJgwSq7bfCao4XM7+jjA29WG6sCc5dk3U/sR6G38DoouqJlGzqBAR2M:qlHJi+bfu4sAjZWG6sCc/kR5MEZqFBAP
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral21 behavioral22
- Target
  resource_/libvlccore.dll
- Size 2.6MB
- SHA256 9126d9abf91585456000fffd9336478e91b9ea07ed2a25806a4e2e0437f96d29
- MD5 e25413bb41c2f239ffdd3569f76e74b0
- SHA1 073e2a86c5c24ede4c4ad2d8614261121a8d2661
- SHA512 37b8339555dcf825a2e27464eb1d101f8e4b56460d1b78161e99ba6761f1a967668f11ba888a712c878d468f419a455dbc5e8e55e7fb9d4fbc87cb78f500ea9f
- SSDEEP 49152:hDWA3C12sNU/wEz2tMEjv9DZWtxfc1lVG3QNVBAUZLYasUpGaXBuQQ9umM:t3O2wEz2tMEj1lWtOrVG3QNVBAUZLX/
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  resource_/rtl120.bpl
- Size 1.1MB
- SHA256 d6dd7a4f46f2cfde9c4eb9463b79d5ff90fc690da14672ba1da39708ee1b9b50
- MD5 adf82ed333fb5567f8097c7235b0e17f
- SHA1 e6ccaf016fc45edcdadeb40da64c207ddb33859f
- SHA512 2253c7b51317a3b5734025b6c7639105dbc81c340703718d679a00c13d40dd74ccaba1f6d04b21ee440f19e82ba680aa4b2a6a75c618aed91bd85a132be9fc92
- SSDEEP 24576:GbhVoNWbA1m6z1hGaMopv3RdaK6IPFf0DtDN9Tox0gc:vtQZPTtgc
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral25 behavioral26

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

lummadiscoverystealer

behavioral4

lummadiscoverystealer

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26