Analysis
-
max time kernel
93s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
27/11/2024, 19:45
General
-
Target
8432d382a8bc238b236f3ef6e1b075f4a1bc048a115a16eae72f0adca56e74ff.exe
-
Size
8.3MB
-
MD5
9afbb0324051e70f1547c64245bc2df2
-
SHA1
3687efd1229f5023b1617305071652421941d52e
-
SHA256
8432d382a8bc238b236f3ef6e1b075f4a1bc048a115a16eae72f0adca56e74ff
-
SHA512
2be2bf2d648f97022d75a55dca5f81d964ab6872b639282ea5a7f6d3d715f2f4a3d22c428164f24533eee6ac2964394ebc8f884e2100b33a5a1b25901d5ddceb
-
SSDEEP
49152:gbDYuz79c82lFKcMvk3ACBNw++LZKKv2OopZo85r5lA/UTHyPr4m/JdY+RKM1Gcs:/uqxbBN97Xm85FlTTHGXCrA6pNNWQ4A
Malware Config
Extracted
lumma
https://p3ar11fter.sbs
https://3xp3cts1aim.sbs
https://owner-vacat10n.sbs
https://peepburry828.sbs
https://p10tgrace.sbs
https://befall-sm0ker.sbs
https://librari-night.sbs
https://processhol.sbs
https://sturdy-operated.cyou
Signatures
-
Lumma Stealer, LummaC
Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
-
Lumma family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8432d382a8bc238b236f3ef6e1b075f4a1bc048a115a16eae72f0adca56e74ff.exe"C:\Users\Admin\AppData\Local\Temp\8432d382a8bc238b236f3ef6e1b075f4a1bc048a115a16eae72f0adca56e74ff.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
344KB
-
Filesize
344KB