Overview

overview

10

Static

static

1

1.9 btc re...le.exe

windows10-ltsc 2021-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1.9 btc recovery wallet file.exe

  • Size

    813KB

  • Sample

    241128-g1sb4svkeq

  • MD5

    1c140f00b0fad15729bc26c0166f1c42

  • SHA1

    0e2454b2606bebf1954b7d564350941826e8f02b

  • SHA256

    9726eef2f9e9bcb24ad2c31df47c0879a258f6fd098bdc170ae31c1ab295119d

  • SHA512

    8561012e92e99931af34a7113cede2011eccc4a29f1b844f0e9a2a8ecbd88579d6bfccf13b08f63b8372642fc3e4dde454dd075d8bae96cb37247105b2ac49c2

  • SSDEEP

    6144:TV2TkZwfQlir19/v2gGtH2b2owDqha8XGEBi5kqEVIoIkENT5UySnrl:h8MwfkMP22bvoqE8XGEBi5kqU2NWyC

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://strappystyio.shop/api

https://coursedonnyre.shop/api

https://fossillargeiw.shop/api

https://tendencerangej.shop/api

https://appleboltelwk.shop/api

https://tearrybyiwo.shop/api

https://captainynfanw.shop/api

https://surveriysiop.shop/api

https://tiddymarktwo.shop/api

Targets

    • Target

      1.9 btc recovery wallet file.exe

    • Size

      813KB

    • MD5

      1c140f00b0fad15729bc26c0166f1c42

    • SHA1

      0e2454b2606bebf1954b7d564350941826e8f02b

    • SHA256

      9726eef2f9e9bcb24ad2c31df47c0879a258f6fd098bdc170ae31c1ab295119d

    • SHA512

      8561012e92e99931af34a7113cede2011eccc4a29f1b844f0e9a2a8ecbd88579d6bfccf13b08f63b8372642fc3e4dde454dd075d8bae96cb37247105b2ac49c2

    • SSDEEP

      6144:TV2TkZwfQlir19/v2gGtH2b2owDqha8XGEBi5kqEVIoIkENT5UySnrl:h8MwfkMP22bvoqE8XGEBi5kqU2NWyC

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks