Overview

overview

10

Static

static

3

8beaa7ab8d...49.exe

windows7-x64

10

8beaa7ab8d...49.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8beaa7ab8d910979575d0fab3610d7d001055d6a5cb93acbf1b4562f8bc09349.exe

  • Size

    480KB

  • Sample

    241127-b5gtaaxjan

  • MD5

    4887be73cfe2f25caa365d217be3e4de

  • SHA1

    f72e1fd471f9e682c7a9822c47436b145475932f

  • SHA256

    8beaa7ab8d910979575d0fab3610d7d001055d6a5cb93acbf1b4562f8bc09349

  • SHA512

    2c6e857fbbf8decb19ee74953c7ca66f6e5bfa87611e67446a0a2cedbc0a3f73aad3958d8d5be8215381cc0000872086169a5d4bf0e23f1fd6c2a6f3a1c8db9c

  • SSDEEP

    12288:iJB+nneDgkXFEIapcLRDW+vHfQ1n21GwriB4ZP/95:GAoR25pclDWMHQ21IWZn

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://powerful-avoids.sbs

https://motion-treesz.sbs

https://disobey-curly.sbs

https://leg-sate-boat.sbs

https://story-tense-faz.sbs

https://blade-govern.sbs

https://occupy-blushi.sbs

https://frogs-severz.sbs

https://property-imper.sbs

Extracted

Family

lumma

C2

https://blade-govern.sbs/api

https://story-tense-faz.sbs/api

Targets

    • Target

      8beaa7ab8d910979575d0fab3610d7d001055d6a5cb93acbf1b4562f8bc09349.exe

    • Size

      480KB

    • MD5

      4887be73cfe2f25caa365d217be3e4de

    • SHA1

      f72e1fd471f9e682c7a9822c47436b145475932f

    • SHA256

      8beaa7ab8d910979575d0fab3610d7d001055d6a5cb93acbf1b4562f8bc09349

    • SHA512

      2c6e857fbbf8decb19ee74953c7ca66f6e5bfa87611e67446a0a2cedbc0a3f73aad3958d8d5be8215381cc0000872086169a5d4bf0e23f1fd6c2a6f3a1c8db9c

    • SSDEEP

      12288:iJB+nneDgkXFEIapcLRDW+vHfQ1n21GwriB4ZP/95:GAoR25pclDWMHQ21IWZn

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks