Overview

overview

10

Static

static

3

Verse.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Verse.exe

  • Size

    1.0MB

  • Sample

    241127-b3dzlswrcn

  • MD5

    1b14ca85c235e35e80113854029bd38a

  • SHA1

    ccadf888f8e39c2f6256da3d2c875b1beeba9db4

  • SHA256

    d809e69a4b66d6c694e2892bb07e83bea22e4996a441a5277c69116cc23feeab

  • SHA512

    1c04e97739125d3fc1543e5bfe5d01434c5c1dd00fb7b647c407c1a512ed61eba4f428642f2b20b5e25deabf76cefd9bcf70a9e8c5d1c667cdd5f6af61b6a8d4

  • SSDEEP

    24576:el7x9P6faKSfQiRUIM8ki6dhlZEyRUIM8ki6dhlZE+:eJ7P6CKSfQEAlbAlH

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://p3ar11fter.sbs

https://3xp3cts1aim.sbs

https://owner-vacat10n.sbs

https://peepburry828.sbs

https://p10tgrace.sbs

https://befall-sm0ker.sbs

https://librari-night.sbs

https://processhol.sbs

https://cook-rain.sbs

Extracted

Family

lumma

C2

https://cook-rain.sbs/api

Targets

    • Target

      Verse.exe

    • Size

      1.0MB

    • MD5

      1b14ca85c235e35e80113854029bd38a

    • SHA1

      ccadf888f8e39c2f6256da3d2c875b1beeba9db4

    • SHA256

      d809e69a4b66d6c694e2892bb07e83bea22e4996a441a5277c69116cc23feeab

    • SHA512

      1c04e97739125d3fc1543e5bfe5d01434c5c1dd00fb7b647c407c1a512ed61eba4f428642f2b20b5e25deabf76cefd9bcf70a9e8c5d1c667cdd5f6af61b6a8d4

    • SSDEEP

      24576:el7x9P6faKSfQiRUIM8ki6dhlZEyRUIM8ki6dhlZE+:eJ7P6CKSfQEAlbAlH

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks