Overview

overview

10

Static

static

10

2896-3-0x0...ry.exe

windows7-x64

1

2896-3-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2896-3-0x00000000012A0000-0x0000000001745000-memory.dmp

  • Size

    4.6MB

  • Sample

    241127-nt85lsylen

  • MD5

    af2243043c8bf2afcb6d64a50efddcf9

  • SHA1

    1c19a4540a9d5640212aeb61a2f72c9c3211b433

  • SHA256

    d4dfce5e59f4e84505b6b1cbee6213a64e906374a5ec101aaadc673a804b1dc1

  • SHA512

    c49253406df3d441f15258d2a7d2313a028dd2b3746779a1736322bafdee785bc47c5c09d33b715ed2bf61ae61d77d40a47a3985c52fb64742535f30b7930259

  • SSDEEP

    98304:UxbJB3bkIeDNrui5FXkF6DwZmFFVhqHQiKZeSkiD:B9puYXkF6+mJMH3KZeED

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://p3ar11fter.sbs

https://3xp3cts1aim.sbs

https://owner-vacat10n.sbs

https://peepburry828.sbs

https://p10tgrace.sbs

https://befall-sm0ker.sbs

https://librari-night.sbs

https://processhol.sbs

https://cook-rain.sbs

Targets

    • Target

      2896-3-0x00000000012A0000-0x0000000001745000-memory.dmp

    • Size

      4.6MB

    • MD5

      af2243043c8bf2afcb6d64a50efddcf9

    • SHA1

      1c19a4540a9d5640212aeb61a2f72c9c3211b433

    • SHA256

      d4dfce5e59f4e84505b6b1cbee6213a64e906374a5ec101aaadc673a804b1dc1

    • SHA512

      c49253406df3d441f15258d2a7d2313a028dd2b3746779a1736322bafdee785bc47c5c09d33b715ed2bf61ae61d77d40a47a3985c52fb64742535f30b7930259

    • SSDEEP

      98304:UxbJB3bkIeDNrui5FXkF6DwZmFFVhqHQiKZeSkiD:B9puYXkF6+mJMH3KZeED

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks