lumma | d4fdc212fc0f1c793dc4410343a28445550bbbbf3090a409aed2cc0b329e8025 | Triage

Sharing

General

Target

bb9de58568867799c964de3c59a7e70a4c69703444126740dca59a8306ca9be3.zip
Size

1.6MB
Sample

241122-z8t5sazjhy
MD5

fb6cf3a39c65d4d1026cde1b90987f75
SHA1

051cba352843ad3ecec6ec56ca29b476f625954a
SHA256

d4fdc212fc0f1c793dc4410343a28445550bbbbf3090a409aed2cc0b329e8025
SHA512

97b29464b0d9e564b385530cfc58806ab4ffc25c704e8fe7cf678c1eb9cc02aa8b38631cf120b244c1431f8e1b1cfff319a17e31fa83e093d56393dd077fa5a0
SSDEEP

49152:7YAiXB8sOGJuAfauv1RrSGBDCZd4u4emI:7PixROGJuE/y48p

Score

10^/10

lumma discovery stealer

Malware Config

Extracted

Family

lumma

C2

https://w0rdergen1.cyou/api

Targets

- Target
  
  bb9de58568867799c964de3c59a7e70a4c69703444126740dca59a8306ca9be3.exe
- Size
  
  3.8MB
- MD5
  
  ac0571edb2c48a0ad96316d995e38abc
- SHA1
  
  56f76fb3d48d1f1c15e70481cd75743b8e2d6a28
- SHA256
  
  bb9de58568867799c964de3c59a7e70a4c69703444126740dca59a8306ca9be3
- SHA512
  
  4078b4035aae258fd6e5e46a468dea927d00e1c8ca197acc88434a22f80e38fbf3215117d817f72ce554a2e7aa579b4baac3b3097d28d40bd8cf86deb8c5be0a
- SSDEEP
  
  49152:heTKQTT19BJwSoYubigHEepqHzoKyanqZB4nJAzImUTkDiLiUhT+CBeAs9:hefPHGHEeKoKyaqZa2zrRMs9
Score

10^/10

discovery lumma stealer
- Lumma Stealer, LummaC
  Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
  stealer lumma
- Lumma family
  lumma
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

lummadiscoverystealer