Overview

overview

10

Static

static

1

loader.exe

windows10-2004-x64

10

loader.exe

windows10-ltsc 2021-x64

10

loader.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    loader.exe

  • Size

    602KB

  • Sample

    241124-1texzs1rby

  • MD5

    3bd0458f5286e8f516095d2d90d7d540

  • SHA1

    91966bc1fdd50beb28dea37c814d34b4112a7969

  • SHA256

    9128b24b0ef69af593c11bc97c2181cf6f767a3b97e66957e4b043de9a58b083

  • SHA512

    9c36baca91eee6d0c21b21ba52db72d99d0cfc23423f0d9ed5b4fd712be24a0e66037a0110aeebc5613893c456ca7d30bfdffe42c0bf2613ee48a84639d66cde

  • SSDEEP

    12288:85IK5Vf7FI8omjNKFWtI3Y5kHVreWDiYtlH5/FBe0Tl/sYEO:8V5YgKFJs4eWTtlH5G0NZt

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://facilitycoursedw.shop/api

https://doughtdrillyksow.shop/api

https://disappointcredisotw.shop/api

https://bargainnygroandjwk.shop/api

https://injurypiggyoewirog.shop/api

https://leafcalfconflcitw.shop/api

https://computerexcudesp.shop/api

https://publicitycharetew.shop/api

Targets

    • Target

      loader.exe

    • Size

      602KB

    • MD5

      3bd0458f5286e8f516095d2d90d7d540

    • SHA1

      91966bc1fdd50beb28dea37c814d34b4112a7969

    • SHA256

      9128b24b0ef69af593c11bc97c2181cf6f767a3b97e66957e4b043de9a58b083

    • SHA512

      9c36baca91eee6d0c21b21ba52db72d99d0cfc23423f0d9ed5b4fd712be24a0e66037a0110aeebc5613893c456ca7d30bfdffe42c0bf2613ee48a84639d66cde

    • SSDEEP

      12288:85IK5Vf7FI8omjNKFWtI3Y5kHVreWDiYtlH5/FBe0Tl/sYEO:8V5YgKFJs4eWTtlH5G0NZt

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks