Overview

overview

10

Static

static

1

Хеnо-v1...ew.zip

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Хеnо-v1.0.9-x64-New.zip

  • Size

    53.1MB

  • Sample

    241127-rk2kyswqh1

  • MD5

    9b996dc817d677a55205a07184b0c832

  • SHA1

    9cac6d68c56ce951bf88d6482be951ab07700482

  • SHA256

    cf0f9c571d661f6aad6703cb6b35c56888097773460678b1c1c76a1c1f3979a2

  • SHA512

    f78a83ce43884b6c30b387bd59aa8fb76aba63fdb6cd818ccf23d18be12991937e73e82d3492cb138db5f016135fac3bf6329ede8a1d787de32a9bc9f3b67250

  • SSDEEP

    1572864:EjiU+xf/VqoBoN8HR+QxyQNEquD9efciBqK:EjihhkWoN0xyQNjuxwb

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://crib-endanger.sbs

https://faintbl0w.sbs

https://300snails.sbs

https://bored-light.sbs

https://3xc1aimbl0w.sbs

https://pull-trucker.sbs

https://fleez-inc.sbs

https://thicktoys.sbs

https://milk-of-horned.cyou

Targets

    • Target

      Хеnо-v1.0.9-x64-New.zip

    • Size

      53.1MB

    • MD5

      9b996dc817d677a55205a07184b0c832

    • SHA1

      9cac6d68c56ce951bf88d6482be951ab07700482

    • SHA256

      cf0f9c571d661f6aad6703cb6b35c56888097773460678b1c1c76a1c1f3979a2

    • SHA512

      f78a83ce43884b6c30b387bd59aa8fb76aba63fdb6cd818ccf23d18be12991937e73e82d3492cb138db5f016135fac3bf6329ede8a1d787de32a9bc9f3b67250

    • SSDEEP

      1572864:EjiU+xf/VqoBoN8HR+QxyQNEquD9efciBqK:EjihhkWoN0xyQNjuxwb

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks