Overview

overview

10

Static

static

3

xnsjjxja.exe

windows7-x64

10

xnsjjxja.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    493734fd3d2a36f848aa8c042a0537897b179679a4dd708329b80ccd13515c8c.zip

  • Size

    636KB

  • Sample

    241220-d6t64syke1

  • MD5

    4f3353a38ad0fe0708ac8c4849ce1255

  • SHA1

    cf96e76f7ace393d0568d7d7ede4359203ed7eb1

  • SHA256

    493734fd3d2a36f848aa8c042a0537897b179679a4dd708329b80ccd13515c8c

  • SHA512

    dbbba2f1707b2080498d624f5c5d25e73c5dfe1e11bd778735103a7cccf006ef2ab2d142006d659bb51be846a85ae38f936ae4e6b78dd36a76573d2e75a2a55d

  • SSDEEP

    12288:gbsMB10h5RqsVnii8CiwpNnyQzoNvugme4chdD0jst0WFQYjTOLvKS:gIM6h5RBQwplFskgmCnGWu2qLZ

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://servicedny.site/api

https://authorisev.site/api

https://faulteyotk.site/api

https://dilemmadu.site/api

https://contemteny.site/api

https://goalyfeastz.site/api

https://opposezmny.site/api

https://seallysl.site/api

https://forbidstow.site/api

Targets

    • Target

      xnsjjxja.exe

    • Size

      1.0MB

    • MD5

      fca874fcb9f344ec26f3ae4d359e75d7

    • SHA1

      f21315cd57ec269b43d6afba58febe39793b72f2

    • SHA256

      56fc365c91e437d19a582a267bfee66ae4d2b4e8c9b039523119d7c9dc6c9fce

    • SHA512

      26b15070ebd0cce7a9c4b2f9188bf5a0fbc30724ffbb48c590e7f2379af896ef05e5a2f8f39462c50aaaa91c57f36394b54453a97b9f779aad379f5d24db8e0e

    • SSDEEP

      24576:1+BNeMxzXC64aUn+EbWKpFOEMalcU3Aa2FTL3JkMt4Qe1CqxO9zTp:cLDxzXC64aUnqKpHlv3Al7JH4t1CUy

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks