Overview

overview

10

Static

static

1

Echelon.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Echelon (Echelon).zip

  • Size

    2.7MB

  • Sample

    241229-2ebsfsynbw

  • MD5

    bb16730742eac3bd4e65edcbb7cd3ae4

  • SHA1

    017c0679fcc3b3299af620bc7b53f59aa7f919b5

  • SHA256

    c1bd2f1c21f26fca7ac03f443b4ef5ccc48fdb7b265c725344c6446f3fc77538

  • SHA512

    da84ab2325287fe56c078c18a7e46108c08879155e2eb694f64041a0a59636ab2e3ad3284ffc4169a2cb87d9cd58e34703da851cc62a9ac1aeb3b4f7858c861e

  • SSDEEP

    49152:mDHpsI5ORpiahgYLX8n9pvVlLrgAdvtnoTo4/8uIsOn5NEHA:yHERpBV8flnx4o/XnGA

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://impend-differ.biz/api

https://print-vexer.biz/api

https://dare-curbys.biz/api

https://covery-mover.biz/api

https://formy-spill.biz/api

https://dwell-exclaim.biz/api

https://zinc-sneark.biz/api

https://se-blurry.biz/api

Targets

    • Target

      Echelon.exe

    • Size

      6.4MB

    • MD5

      cbdef49d32cf66bfa4c8a86d225b11bd

    • SHA1

      bc2ce52834c6a615a8bd5d3b6aafd25239d03b44

    • SHA256

      4e6c7876342928a4ca103e27e2a0823c0e8df2457ba32e5d62fcf94cb111a477

    • SHA512

      84c6a436250dc12c2055c75abd318c07408c314388ac3c3209d22985955cb2d1cc9e916f29fb10d9257cb3d995a72cf91be83258e3151b6a0eda36125b831adb

    • SSDEEP

      196608:YkywgD6ytCV8NxxKQP8v0ojDIg9Cbk/V8e:pyp621P8vXDd

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks