Overview

overview

10

Static

static

1

2dcaef6a6f...e6.exe

windows7-x64

10

2dcaef6a6f...e6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2dcaef6a6fdeb2e37731c62d307f780235a04e2bae33bb2e51a602de41d40ee6

  • Size

    570KB

  • Sample

    241126-ylabestjep

  • MD5

    bcdb627d23e04d8897f13a3b2ab55bae

  • SHA1

    46bdbfb1faebf86251e3a01cdd1db70ca9b42924

  • SHA256

    2dcaef6a6fdeb2e37731c62d307f780235a04e2bae33bb2e51a602de41d40ee6

  • SHA512

    872b18411b26c90efab241d32d9fb153ed035744dd8b5e30296c556483bb687380f428de1f1b28d996b7d2190c53f322a6203bca885efab789eac07b1c676e5a

  • SSDEEP

    12288:ro3gygylSwAN2kLkhn23cVkolDApUPnR7YYRFyrcAra9lr7v:U3gygnN2kLktscVkolDApUfR7vRFy7WL

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://p3ar11fter.sbs

https://3xp3cts1aim.sbs

https://owner-vacat10n.sbs

https://peepburry828.sbs

https://p10tgrace.sbs

https://befall-sm0ker.sbs

https://librari-night.sbs

https://processhol.sbs

https://cook-rain.sbs

Extracted

Family

lumma

C2

https://cook-rain.sbs/api

Targets

    • Target

      2dcaef6a6fdeb2e37731c62d307f780235a04e2bae33bb2e51a602de41d40ee6

    • Size

      570KB

    • MD5

      bcdb627d23e04d8897f13a3b2ab55bae

    • SHA1

      46bdbfb1faebf86251e3a01cdd1db70ca9b42924

    • SHA256

      2dcaef6a6fdeb2e37731c62d307f780235a04e2bae33bb2e51a602de41d40ee6

    • SHA512

      872b18411b26c90efab241d32d9fb153ed035744dd8b5e30296c556483bb687380f428de1f1b28d996b7d2190c53f322a6203bca885efab789eac07b1c676e5a

    • SSDEEP

      12288:ro3gygylSwAN2kLkhn23cVkolDApUPnR7YYRFyrcAra9lr7v:U3gygnN2kLktscVkolDApUfR7vRFy7WL

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks