Overview

overview

10

Static

static

3

crypted_LummaC2.exe

windows7-x64

10

crypted_LummaC2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    crypted_LummaC2.exe

  • Size

    2.2MB

  • Sample

    241129-ta25vaykaj

  • MD5

    eea72f5dd07bf4f305d1656d6d7faa7e

  • SHA1

    4c0f8faf4595962e21f7d39b9a37bcf4afbf2d41

  • SHA256

    50828bab09602ff91a8fcb4c8ded23a2331472e62b32edc8f54b68c5ae91f40e

  • SHA512

    d99628bd538015687073bf0afb4af25f1ea51c7b2135245b475d77bf93ed85a2787239cea7e6e2f1546ae49958c4e402d241aa1ed702ef799d5830147f5a0d14

  • SSDEEP

    49152:0n+kki5uTDZERkvr3tenIM09PmjicGvnK76094QGLkb6KDSs3/L3Bk8EVYo77Ikb:0nVkU+lERkvr3tuIMcmjiXnuZ94QGLkC

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://preside-comforter.sbs

https://savvy-steereo.sbs

https://copper-replace.sbs

https://record-envyp.sbs

https://slam-whipp.sbs

https://wrench-creter.sbs

https://looky-marked.sbs

https://plastic-mitten.sbs

https://lumhiddenforest.shop/api

Targets

    • Target

      crypted_LummaC2.exe

    • Size

      2.2MB

    • MD5

      eea72f5dd07bf4f305d1656d6d7faa7e

    • SHA1

      4c0f8faf4595962e21f7d39b9a37bcf4afbf2d41

    • SHA256

      50828bab09602ff91a8fcb4c8ded23a2331472e62b32edc8f54b68c5ae91f40e

    • SHA512

      d99628bd538015687073bf0afb4af25f1ea51c7b2135245b475d77bf93ed85a2787239cea7e6e2f1546ae49958c4e402d241aa1ed702ef799d5830147f5a0d14

    • SSDEEP

      49152:0n+kki5uTDZERkvr3tenIM09PmjicGvnK76094QGLkb6KDSs3/L3Bk8EVYo77Ikb:0nVkU+lERkvr3tuIMcmjiXnuZ94QGLkC

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks