Overview

overview

10

Static

static

10

XWorm-5.6.zip

windows7-x64

1

XWorm-5.6.zip

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XWorm-5.6.zip

  • Size

    49.5MB

  • Sample

    241116-1z3w1atqc1

  • MD5

    c13b9ae52147d0afdb8cb9b8edda5552

  • SHA1

    7fc8347c6243f9d07de7ddffc56b385ca49b25ee

  • SHA256

    bf62d90d7eb8100edb87d091a92c84709cec9607690c44775976ace17703d8e7

  • SHA512

    1b98e79e3c9c6de8da65e38d83e6d94cb9b870da9167f6de7ccc4b82e1f3fb118ac1b2786eaf7f4e96c45275438b89771b61ecf13d9dca88aae0b9b90d6c638e

  • SSDEEP

    1572864:zQP19FRCzRf8cWust/W8kmXDBYl44kjrKm5I+y:zegfSku34kad

Score
10/10
lummastormkittyxwormdiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://pillowbrocccolipe.shop/api

https://communicationgenerwo.shop/api

https://diskretainvigorousiw.shop/api

https://affordcharmcropwo.shop/api

https://dismissalcylinderhostw.shop/api

https://enthusiasimtitleow.shop/api

https://worryfillvolcawoi.shop/api

https://cleartotalfisherwo.shop/api

Targets

    • Target

      XWorm-5.6.zip

    • Size

      49.5MB

    • MD5

      c13b9ae52147d0afdb8cb9b8edda5552

    • SHA1

      7fc8347c6243f9d07de7ddffc56b385ca49b25ee

    • SHA256

      bf62d90d7eb8100edb87d091a92c84709cec9607690c44775976ace17703d8e7

    • SHA512

      1b98e79e3c9c6de8da65e38d83e6d94cb9b870da9167f6de7ccc4b82e1f3fb118ac1b2786eaf7f4e96c45275438b89771b61ecf13d9dca88aae0b9b90d6c638e

    • SSDEEP

      1572864:zQP19FRCzRf8cWust/W8kmXDBYl44kjrKm5I+y:zegfSku34kad

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks