Analysis
-
max time kernel
92s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21-11-2024 08:51
General
-
Target
0b8c1d7a910b0d9e747ebccc74b8bff20d33525bbdfc42a9b6044f6d4cf3815e.exe
-
Size
7.4MB
-
MD5
6af5173d76400cfadc0138597343242a
-
SHA1
f4bd16a574aec094e01c02421bcb8cc651cf6355
-
SHA256
0b8c1d7a910b0d9e747ebccc74b8bff20d33525bbdfc42a9b6044f6d4cf3815e
-
SHA512
41abee71d20f04e2c0b2d21ed39156bfa550895033fb435699778f6a874d250260f8e23d9ebe44eb00e050e20c8ddf861a70b9d38fb7b14a0175def5ad605307
-
SSDEEP
98304:OsRFrV/GoQi48oJb8PXeeEsHS5rYyqjvS2bHKViPnR9ows/i/I4:vcoQi4xJt6xbKVib84
Malware Config
Extracted
lumma
https://servicedny.site
https://authorisev.site
https://faulteyotk.site
https://dilemmadu.site
https://contemteny.site
https://goalyfeastz.site
https://opposezmny.site
https://seallysl.site
https://forbidstow.site
Signatures
-
Lumma Stealer, LummaC
Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
-
Lumma family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0b8c1d7a910b0d9e747ebccc74b8bff20d33525bbdfc42a9b6044f6d4cf3815e.exe"C:\Users\Admin\AppData\Local\Temp\0b8c1d7a910b0d9e747ebccc74b8bff20d33525bbdfc42a9b6044f6d4cf3815e.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
352KB
-
Filesize
352KB
-
Filesize
352KB
-
Filesize
2.0MB