General

  • Target

    Stover Launcher.rar

  • Size

    3.4MB

  • Sample

    241013-y94j6sxaph

  • MD5

    315d40e6bc332c3c67c4a721955446f5

  • SHA1

    1891037e26acbf6a2db858160be8c1305a45d3ed

  • SHA256

    40f379db2a2f22877298385a3cf62229b1fde17b605879f8d063d7e83bb4aee3

  • SHA512

    4b84fbf67af99804a35538cc526958762edef81a9cbef6d2a0c4bb7e43c1a2a0709e8258aebad01adf702264ff760adf2b25103b30fb6fd269ca9987d71f1248

  • SSDEEP

    49152:aX7HbioiwMR7KrZ0YK1FBudzlSYdZaIOFTRTl7NhpR/6eOxrhkQUoDV:aX7JMRq+YK1FizvEpHUNrhkv+

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://drawwyobstacw.sbs

https://condifendteu.sbs

https://ehticsprocw.sbs

https://vennurviot.sbs

https://resinedyw.sbs

https://enlargkiw.sbs

https://allocatinow.sbs

https://mathcucom.sbs

https://widdensmoywi.sbs

Targets

    • Target

      Stover Launcher/Aayhtb.dll

    • Size

      735KB

    • MD5

      3c686bee0de43dc9b22ceb590c4f2cdc

    • SHA1

      012d39efddabef00882d0d924320a830700a0584

    • SHA256

      0db0a479584f02b28ab6852396e64605b04a97a018cbd9ab97a6c570e80c5353

    • SHA512

      adbcb2b12c833725da8d61d806a1d49ec4ccd867b2aa5285fb59b15da63a71b4c2b4c36cfc8558fddb99ca484affb74410cb8bdce1862464b1897d6332eca21b

    • SSDEEP

      3:GmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNB:n

    Score
    1/10
    • Target

      Stover Launcher/Autoupdate.dll

    • Size

      2.5MB

    • MD5

      51397005ac7db572e3af109699f4ba73

    • SHA1

      c9bcb56dd1a4c4b687917aac34f703908a5d4bde

    • SHA256

      07bd44748b663d9efbf35cd962408b57ad72a7ce65bdc2722db284f343b2d891

    • SHA512

      512740d00adf5512cd8f6ca163a1c137a0e17091243d880271945b90306f7ddc6b47928b27985c5b60b4474e5be57273308babe50986fda638dc6b8ea2f0f2c8

    • SSDEEP

      3:GmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNB:n

    Score
    1/10
    • Target

      Stover Launcher/Config.cfg

    • Size

      183KB

    • MD5

      6d7f976b644410f6251697469e25af61

    • SHA1

      faa26974833529f162cde7273405bcc6a945a9b6

    • SHA256

      bb83eb8a0ae75c425f6ec72af554e5f8158eb4ffa0a898e26b564fc0217c8ae5

    • SHA512

      e160464239b42bdaade8a50e762e233053627c67bccd435c8431aff5efed36945f5524b5e1e56821625ff71456eb5b640ace959aa728d0cf186c1c91a7cf39d7

    • SSDEEP

      3:GmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNB:n

    Score
    3/10
    • Target

      Stover Launcher/Quadv.dll

    • Size

      547KB

    • MD5

      9591405073c6460e382343c75de477e3

    • SHA1

      32d73c95f3a6f5470230dd21800de592c06d906a

    • SHA256

      952dc4888a39c7ae027b323345996ff163af787e71103af323588df74be01f23

    • SHA512

      d7cf6df8eea6128447ebd99a9c4c5823b0ae1919dfd30bb63bdaa277eb7e1a7226b0bb2da675b790cb4b6cc4262c26094a96c34b3d257439a02c80b5db0f7138

    • SSDEEP

      3:GmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNu:s

    Score
    1/10
    • Target

      Stover Launcher/READ ME (PASSWORD Stover).txt

    • Size

      308B

    • MD5

      5b59bb88153788c94fe1d514b03c7b45

    • SHA1

      425cb280ea275d35820ca0942b3569b1764d34a8

    • SHA256

      2b19f6c1f13f02120d44a0e671d5ebe3d1f5e3c61ad74241af895027f9ecabe4

    • SHA512

      fcb0e2deefa449e24d06c59cc11999b28a94f51483710186ea41d85b3b60f7db03b4ba4327a4d8534b5fd1c932e95c1490b502be1f9a7a5bcff670f06de402f1

    Score
    1/10
    • Target

      Stover Launcher/Xheu.dll

    • Size

      86KB

    • MD5

      e20f47fc6b9c5223478b583a73e58544

    • SHA1

      28a793d431dec8a637cba226b76f96b05f38c719

    • SHA256

      5b8835142581306c013b00c1989263e4db3f2f9940755d0a178af443393219c4

    • SHA512

      523c32b289cd836894603efc6a3a7430df79ebd42f26e603cc72e2129eec003e575a34bfb5896b6a03c10e789b27ff9e76553f17773ecab972cc23cfcc12bfcb

    • SSDEEP

      3:GmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNF:Bdh411I

    Score
    1/10
    • Target

      Stover Launcher/aah32.dll

    • Size

      551KB

    • MD5

      b0739745e782946a0dae3c0026e24d32

    • SHA1

      702e88c1d3b23000db64028d688cda310d79d70b

    • SHA256

      68810e83425efae5727d3ccf2aa0fcf82f571cd756c48c89869a55d952936bf6

    • SHA512

      9390ff73c37db63721d957c59bbf46d198ca7fdc2246c340b735fab3c82bad33c3c757f466da89d1cbfc64ef43c543495499dc8036d43d1e477d0fc4f6cc9fa6

    • SSDEEP

      3:GmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNB:n

    Score
    1/10
    • Target

      Stover Launcher/bin/Aayhtb.dll

    • Size

      735KB

    • MD5

      3c686bee0de43dc9b22ceb590c4f2cdc

    • SHA1

      012d39efddabef00882d0d924320a830700a0584

    • SHA256

      0db0a479584f02b28ab6852396e64605b04a97a018cbd9ab97a6c570e80c5353

    • SHA512

      adbcb2b12c833725da8d61d806a1d49ec4ccd867b2aa5285fb59b15da63a71b4c2b4c36cfc8558fddb99ca484affb74410cb8bdce1862464b1897d6332eca21b

    • SSDEEP

      3:GmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNB:n

    Score
    1/10
    • Target

      Stover Launcher/bin/Autoupdatefor.dll

    • Size

      2.5MB

    • MD5

      51397005ac7db572e3af109699f4ba73

    • SHA1

      c9bcb56dd1a4c4b687917aac34f703908a5d4bde

    • SHA256

      07bd44748b663d9efbf35cd962408b57ad72a7ce65bdc2722db284f343b2d891

    • SHA512

      512740d00adf5512cd8f6ca163a1c137a0e17091243d880271945b90306f7ddc6b47928b27985c5b60b4474e5be57273308babe50986fda638dc6b8ea2f0f2c8

    • SSDEEP

      3:GmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNB:n

    Score
    1/10
    • Target

      Stover Launcher/bin/aah32.dll

    • Size

      551KB

    • MD5

      b0739745e782946a0dae3c0026e24d32

    • SHA1

      702e88c1d3b23000db64028d688cda310d79d70b

    • SHA256

      68810e83425efae5727d3ccf2aa0fcf82f571cd756c48c89869a55d952936bf6

    • SHA512

      9390ff73c37db63721d957c59bbf46d198ca7fdc2246c340b735fab3c82bad33c3c757f466da89d1cbfc64ef43c543495499dc8036d43d1e477d0fc4f6cc9fa6

    • SSDEEP

      3:GmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNB:n

    Score
    1/10
    • Target

      Stover Launcher/inject.dll

    • Size

      153KB

    • MD5

      b9845d2018ad4752641a4de3af749fc6

    • SHA1

      d0c7ac1b38d43f2cd462cfff36dfe41d3af63057

    • SHA256

      93af58358d1fb0b3faf592375dc1826caf172544223e8ce2ee4e63a4f6ee46b5

    • SHA512

      56f2b98a2e9a31c25e6a5e32037997e888c51d4b20d04b9a8eb52a5db825af82b643a06919ea918829a8d9dd80dfc5cb000c77617e753610d7e66b6d6d32ea73

    • SSDEEP

      3:GmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNx:dx

    Score
    1/10
    • Target

      Stover Launcher/script.dll

    • Size

      735KB

    • MD5

      3c686bee0de43dc9b22ceb590c4f2cdc

    • SHA1

      012d39efddabef00882d0d924320a830700a0584

    • SHA256

      0db0a479584f02b28ab6852396e64605b04a97a018cbd9ab97a6c570e80c5353

    • SHA512

      adbcb2b12c833725da8d61d806a1d49ec4ccd867b2aa5285fb59b15da63a71b4c2b4c36cfc8558fddb99ca484affb74410cb8bdce1862464b1897d6332eca21b

    • SSDEEP

      3:GmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNB:n

    Score
    1/10
    • Target

      Stover Launcher/stoverlauncher.exe

    • Size

      529KB

    • MD5

      f60d75fada5331f4b255a93a701029fa

    • SHA1

      4d37c8da16aecbf30a2235e4a4b635ea8d4a26fd

    • SHA256

      f7eb2e70800291e0299b7ea6812116b5ec77cf8cb9b0d55dff2fa8ce711aff3e

    • SHA512

      1c1462b7b6ccd31d336f2f3425e7f04e41ab02b44ea7c37b96bdc0450e91dee933f837c626b97b80c80378c8b7ec6975bd326f53688d5e675f54b4921670e554

    • SSDEEP

      12288:yJLU6O9mT0kSC41ewWTIgUu1WXszPeOfEUgtVOfWqY5e74dEO:iA6O9QEWTIgUu1p6OJkY7Y5Uwt

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Suspicious use of SetThreadContext

    • Target

      Stover Launcher/version.dll

    • Size

      183KB

    • MD5

      6d7f976b644410f6251697469e25af61

    • SHA1

      faa26974833529f162cde7273405bcc6a945a9b6

    • SHA256

      bb83eb8a0ae75c425f6ec72af554e5f8158eb4ffa0a898e26b564fc0217c8ae5

    • SHA512

      e160464239b42bdaade8a50e762e233053627c67bccd435c8431aff5efed36945f5524b5e1e56821625ff71456eb5b640ace959aa728d0cf186c1c91a7cf39d7

    • SSDEEP

      3:GmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNmNB:n

    Score
    1/10
    • Target

      Stover Launcher/x32/autoupdate.dll

    • Size

      10.0MB

    • MD5

      1600936f5639edacea1a9e873df4dd59

    • SHA1

      82e7101a3c32b7096beab9282f2054a4d2bc91f7

    • SHA256

      42a9739f77fd2ee2294a4b7f2e2f9723344af2c44fc5cb831d39d0575ab51692

    • SHA512

      9cfb9162b53eb3d5bb6e49e4a45a665a414649d9450d2ccd807ecd687990fe89541a994f18d89ec9275f78df5e3641482f564be8b8c255535a8e4950ddf05009

    • SSDEEP

      24576:S9ChCwC+vwWi74+ZsEfw3fc/cUkwwKrfMarSS2EbJI/5Qz+LRWV9X1BylFDefUxX:S9C9oQM59C9oQMo

    Score
    1/10
    • Target

      Stover Launcher/x32/x32.dll

    • Size

      9.9MB

    • MD5

      a3bd0960ec24dcad54117d5cb2424028

    • SHA1

      f694a433273f9179a580d0a895a5932924604dd1

    • SHA256

      a5c8cb0e5d4859af4893b5ae756609354fd9184c0ff13eb4490c2d67d05a7e4e

    • SHA512

      224318f75ee1ce4ebe61af64a64b389eae3bfdc707027619ebe01491e0b63ac7365c594646b5045013319fe0c6702bd5c8927d114843a18d47767d099b27cb11

    • SSDEEP

      24576:S9ChCwC+vwWi74+ZsEfw3fc/cUkwwKrfMarSS2EbJI/5Qz+LRWV9X1BylFDefUxO:S9C9oQM59C9oQMx

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
1/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

discovery
Score
3/10

behavioral6

Score
3/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

lummadiscoverystealer
Score
10/10

behavioral26

lummadiscoverystealer
Score
10/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10