Analysis
-
max time kernel
94s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21-11-2024 07:52
General
-
Target
b212316fb9c8b8a9982f38159708c983d48a5b7f9c2fbb406e69344a3746af7c.exe
-
Size
7.3MB
-
MD5
77029498e000da796cecae0b7e8a1ae3
-
SHA1
7137e9c7e4b0a6e045a5d9f1102d56880431e669
-
SHA256
b212316fb9c8b8a9982f38159708c983d48a5b7f9c2fbb406e69344a3746af7c
-
SHA512
4cca71ab92b7922d35076856282db2ac6ed6812a2eb6db049c6a863e02a8da955983219d6de1aa11190157b8e2f7e23af54e14d4d59b67a80b95d48b82a440dc
-
SSDEEP
196608:oDpFEd4X8ylnH7ATybMRbCkH/RFleLZWBEBlqZf+i8:odFEdEzpGPskHheVW+BQZK
Score
10/10
Malware Config
Extracted
Family
lumma
C2
https://systematci.cyou/api
Signatures
-
Lumma Stealer, LummaC
Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
-
Lumma family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b212316fb9c8b8a9982f38159708c983d48a5b7f9c2fbb406e69344a3746af7c.exe"C:\Users\Admin\AppData\Local\Temp\b212316fb9c8b8a9982f38159708c983d48a5b7f9c2fbb406e69344a3746af7c.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
320KB
-
Filesize
320KB