Overview

overview

10

Static

static

10

1508-3-0x0...ry.exe

windows7-x64

1

1508-3-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1508-3-0x0000000000950000-0x0000000000DF2000-memory.dmp

  • Size

    4.6MB

  • Sample

    241127-the1aazqdx

  • MD5

    3cde67f043682269c101b1be4b60e0fd

  • SHA1

    636f8a453b13a90237ce7342b8b10d00bb562516

  • SHA256

    e1a181c3c9ac6b154bb36a38a341fdeef9d8ac8e8e460919f9d9057ed95e0d04

  • SHA512

    d5824f3700555a6504e0bd419d3eb383e4bcacc928635fcbd1595fbb60a3ff74a1db5584293ad67c4659c41d472c4d5f1e4bcaf47b469eb4b1be7882c622e93f

  • SSDEEP

    98304:NM4hfHiRjz905+vmU/Z4ZRjQiS2WEuUlJitEtFZ8AJhx/kvsfvJ:24hfGZCiiSzZKhZJz8vs

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://powerful-avoids.sbs

https://motion-treesz.sbs

https://disobey-curly.sbs

https://leg-sate-boat.sbs

https://story-tense-faz.sbs

https://blade-govern.sbs

https://occupy-blushi.sbs

https://frogs-severz.sbs

https://property-imper.sbs

Targets

    • Target

      1508-3-0x0000000000950000-0x0000000000DF2000-memory.dmp

    • Size

      4.6MB

    • MD5

      3cde67f043682269c101b1be4b60e0fd

    • SHA1

      636f8a453b13a90237ce7342b8b10d00bb562516

    • SHA256

      e1a181c3c9ac6b154bb36a38a341fdeef9d8ac8e8e460919f9d9057ed95e0d04

    • SHA512

      d5824f3700555a6504e0bd419d3eb383e4bcacc928635fcbd1595fbb60a3ff74a1db5584293ad67c4659c41d472c4d5f1e4bcaf47b469eb4b1be7882c622e93f

    • SSDEEP

      98304:NM4hfHiRjz905+vmU/Z4ZRjQiS2WEuUlJitEtFZ8AJhx/kvsfvJ:24hfGZCiiSzZKhZJz8vs

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks