Overview

overview

10

Static

static

3

crypted_LummaC2.exe

windows7-x64

10

crypted_LummaC2.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    96s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-11-2024 15:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    crypted_LummaC2.exe

  • Size

    2.2MB

  • MD5

    eea72f5dd07bf4f305d1656d6d7faa7e

  • SHA1

    4c0f8faf4595962e21f7d39b9a37bcf4afbf2d41

  • SHA256

    50828bab09602ff91a8fcb4c8ded23a2331472e62b32edc8f54b68c5ae91f40e

  • SHA512

    d99628bd538015687073bf0afb4af25f1ea51c7b2135245b475d77bf93ed85a2787239cea7e6e2f1546ae49958c4e402d241aa1ed702ef799d5830147f5a0d14

  • SSDEEP

    49152:0n+kki5uTDZERkvr3tenIM09PmjicGvnK76094QGLkb6KDSs3/L3Bk8EVYo77Ikb:0nVkU+lERkvr3tuIMcmjiXnuZ94QGLkC

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://preside-comforter.sbs

https://savvy-steereo.sbs

https://copper-replace.sbs

https://record-envyp.sbs

https://slam-whipp.sbs

https://wrench-creter.sbs

https://looky-marked.sbs

https://plastic-mitten.sbs

https://lumhiddenforest.shop/api

Signatures

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma
  • Lumma family
    lumma
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\crypted_LummaC2.exe
    "C:\Users\Admin\AppData\Local\Temp\crypted_LummaC2.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3012

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3012-0-0x0000000000400000-0x000000000045D000-memory.dmp

    Filesize

    372KB

    Download

  • memory/3012-1-0x0000000000400000-0x000000000045D000-memory.dmp

    Filesize

    372KB

    Download