Overview

overview

10

Static

static

6

CBBE_Skyrim_V1.0.7z

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    CBBE_Skyrim_V1.0.7z

  • Size

    87.2MB

  • Sample

    241119-j21e8ashrj

  • MD5

    f1ac906874e39cfc90adb906f7eda5b9

  • SHA1

    1b56ff878192c4a2929d6df3c33fec7afdb94565

  • SHA256

    686142cd5dcb64078dcc014bf37cc639dd9b312c02a9aa55598b95638bf13bf0

  • SHA512

    f66671a31648be68d6f9820e0bb8b1aa9f66c1e440424c46efc38048bbfc2a298bbc7e23d79334af43f7d010669503bc6896f062e7709d96a0311229e4f552e5

  • SSDEEP

    1572864:wzDy9Z6G9mO5ZYuK736weVM+qN6I9WSRKhCBwfkYKtgqvENCAJ9pEdcQaETjo6A6:wz+1quAGM+qN6IQSwhkwfkYKXscuEdBn

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://processhol.sbs/api

https://p10tgrace.sbs/api

https://peepburry828.sbs/api

https://3xp3cts1aim.sbs/api

https://p3ar11fter.sbs/api

Targets

    • Target

      CBBE_Skyrim_V1.0.7z

    • Size

      87.2MB

    • MD5

      f1ac906874e39cfc90adb906f7eda5b9

    • SHA1

      1b56ff878192c4a2929d6df3c33fec7afdb94565

    • SHA256

      686142cd5dcb64078dcc014bf37cc639dd9b312c02a9aa55598b95638bf13bf0

    • SHA512

      f66671a31648be68d6f9820e0bb8b1aa9f66c1e440424c46efc38048bbfc2a298bbc7e23d79334af43f7d010669503bc6896f062e7709d96a0311229e4f552e5

    • SSDEEP

      1572864:wzDy9Z6G9mO5ZYuK736weVM+qN6I9WSRKhCBwfkYKtgqvENCAJ9pEdcQaETjo6A6:wz+1quAGM+qN6IQSwhkwfkYKXscuEdBn

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks