Analysis
-
max time kernel
94s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
27/11/2024, 21:28
General
-
Target
2024-11-27_b3649bc8bf914f16f8adf00bf952a1e0_hijackloader_icedid_luca-stealer_magniber.exe
-
Size
8.6MB
-
MD5
b3649bc8bf914f16f8adf00bf952a1e0
-
SHA1
f97602efac13a3759b7d15b18c501ca336cf7671
-
SHA256
1ab786dbe7a932e1acd8fa6332e4dcb3651d2ee9a5a0810c828865b2178424a0
-
SHA512
1f6c4e2b94d39b8e27976b1659c154adc617bb74197ad5f2fd0a03d7ff39f98a9403d64501be9b92c6599d996b1f7b20f8d8df8db5cadbddbc084d7085dcf562
-
SSDEEP
196608:w7erIGwLw09S/tgHkqqd6dT5PznzaE61KG/PQrBlFW5m:wqrw9M/tgHEdCvG/qBDW5m
Malware Config
Extracted
lumma
https://p3ar11fter.sbs
https://3xp3cts1aim.sbs
https://owner-vacat10n.sbs
https://peepburry828.sbs
https://p10tgrace.sbs
https://befall-sm0ker.sbs
https://librari-night.sbs
https://processhol.sbs
https://soon-jell.cyou
Extracted
lumma
https://soon-jell.cyou/api
Signatures
-
Lumma Stealer, LummaC
Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
-
Lumma family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-11-27_b3649bc8bf914f16f8adf00bf952a1e0_hijackloader_icedid_luca-stealer_magniber.exe"C:\Users\Admin\AppData\Local\Temp\2024-11-27_b3649bc8bf914f16f8adf00bf952a1e0_hijackloader_icedid_luca-stealer_magniber.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
348KB
-
Filesize
348KB
-
Filesize
348KB