Overview

overview

10

Static

static

1

desktop.ini

windows7-x64

1

desktop.ini

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    desktop.ini

  • Size

    282B

  • Sample

    241126-fw9j6awmgy

  • MD5

    3a37312509712d4e12d27240137ff377

  • SHA1

    30ced927e23b584725cf16351394175a6d2a9577

  • SHA256

    b029393ea7b7cf644fb1c9f984f57c1980077562ee2e15d0ffd049c4c48098d3

  • SHA512

    dbb9abe70f8a781d141a71651a62a3a743c71a75a8305e9d23af92f7307fb639dc4a85499115885e2a781b040cbb7613f582544c2d6de521e588531e9c294b05

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://covvercilverow.shop/api

https://surroundeocw.shop/api

https://abortinoiwiam.shop/api

https://pumpkinkwquo.shop/api

https://priooozekw.shop/api

https://deallyharvenw.shop/api

https://defenddsouneuw.shop/api

https://racedsuitreow.shop/api

https://roaddrermncomplai.shop/api

Targets

    • Target

      desktop.ini

    • Size

      282B

    • MD5

      3a37312509712d4e12d27240137ff377

    • SHA1

      30ced927e23b584725cf16351394175a6d2a9577

    • SHA256

      b029393ea7b7cf644fb1c9f984f57c1980077562ee2e15d0ffd049c4c48098d3

    • SHA512

      dbb9abe70f8a781d141a71651a62a3a743c71a75a8305e9d23af92f7307fb639dc4a85499115885e2a781b040cbb7613f582544c2d6de521e588531e9c294b05

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks