Overview

overview

10

Static

static

1

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    572KB

  • Sample

    241121-elsm8ayalc

  • MD5

    397228fd3907db6c1144ef0e5597b314

  • SHA1

    147afb1fb37b7047f39ce2436225bb32e5601420

  • SHA256

    4b79d59b0243ebf9c1daf598d23a16f5de8820c3c17eed22b4d6ce40835fdadf

  • SHA512

    e29c661314c8bbbab264f04d1f6549dfd893b70181a446b3c564a18254ea8dac6e7f4d9a2e4818623381c939adef8ef3084849774a9f48e4a86d66aed3358649

  • SSDEEP

    12288:9o3gygylSwAN2kLkhn23c7Abpzq/Dw3imKQJ4nTL35iDBrDEnch3m/71lr7v:i3gygnN2kLktsc7keDHQJqTk98r7v

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://p3ar11fter.sbs

https://3xp3cts1aim.sbs

https://owner-vacat10n.sbs

https://peepburry828.sbs

https://p10tgrace.sbs

https://befall-sm0ker.sbs

https://librari-night.sbs

https://processhol.sbs

https://push-hook.cyou

Extracted

Family

lumma

C2

https://push-hook.cyou/api

https://librari-night.sbs/api

https://befall-sm0ker.sbs/api

https://owner-vacat10n.sbs/api

Targets

    • Target

      file.exe

    • Size

      572KB

    • MD5

      397228fd3907db6c1144ef0e5597b314

    • SHA1

      147afb1fb37b7047f39ce2436225bb32e5601420

    • SHA256

      4b79d59b0243ebf9c1daf598d23a16f5de8820c3c17eed22b4d6ce40835fdadf

    • SHA512

      e29c661314c8bbbab264f04d1f6549dfd893b70181a446b3c564a18254ea8dac6e7f4d9a2e4818623381c939adef8ef3084849774a9f48e4a86d66aed3358649

    • SSDEEP

      12288:9o3gygylSwAN2kLkhn23c7Abpzq/Dw3imKQJ4nTL35iDBrDEnch3m/71lr7v:i3gygnN2kLktsc7keDHQJqTk98r7v

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks