Overview

overview

10

Static

static

3

libsrv32.exe

windows7-x64

10

libsrv32.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    libsrv32.exe

  • Size

    3.8MB

  • Sample

    241118-ta6g9szka1

  • MD5

    ea0336aaa24742c774ca8713132c7b4d

  • SHA1

    7df85e68177fb118eb1461d2dfc927198d458eb4

  • SHA256

    920226a25d102c354672c1c004a9551087f392d352077e8b7c82b973b6068267

  • SHA512

    0ae61cb6ee165caa4e9f6b72411b4e27bef52cc6684f697749cb94df0364a3bdd5f4103c21b7b1ffd75f385b8c968b000c06d59649cfe20cf78258003e2fb52c

  • SSDEEP

    49152:K7/idr291YPqWomuHBVygwtqnw1b2b6xWXJf4WGdxT585/IUZl18vPksj:K7KB291YCWomEfygwthd2ukJf47d

Score
10/10
lummadiscoverypersistencestealer

Malware Config

Extracted

Family

lumma

C2

https://bab120witty.sbs/api

https://processhol.sbs/api

https://p10tgrace.sbs/api

https://peepburry828.sbs/api

https://3xp3cts1aim.sbs/api

https://p3ar11fter.sbs/api

Targets

    • Target

      libsrv32.exe

    • Size

      3.8MB

    • MD5

      ea0336aaa24742c774ca8713132c7b4d

    • SHA1

      7df85e68177fb118eb1461d2dfc927198d458eb4

    • SHA256

      920226a25d102c354672c1c004a9551087f392d352077e8b7c82b973b6068267

    • SHA512

      0ae61cb6ee165caa4e9f6b72411b4e27bef52cc6684f697749cb94df0364a3bdd5f4103c21b7b1ffd75f385b8c968b000c06d59649cfe20cf78258003e2fb52c

    • SSDEEP

      49152:K7/idr291YPqWomuHBVygwtqnw1b2b6xWXJf4WGdxT585/IUZl18vPksj:K7KB291YCWomEfygwthd2ukJf47d

    Score
    10/10
    lummadiscoverypersistencestealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks