Analysis
-
max time kernel
93s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
30/12/2024, 05:30
General
-
Target
Setup.exe
-
Size
673.8MB
-
MD5
80ac3a6b6c1939ee55340c174cebece6
-
SHA1
6d253f44f93ca4b9bb1aabdbc41b5abc84a42108
-
SHA256
687392bea9667f3faa3d745c2f1ec5a15dafb7fe88e92d2a7ccaf2238d39e9b8
-
SHA512
a9c659be4dd7e37f9e8c72f00ced3bb1b36bb71921044c4bebaa4ad81c68d45a19c5a5ad3963c82d14ab5e84949cfdfff5be9dcc313b074700220f28f9985a6c
-
SSDEEP
49152:/8d1YnU7M/rHiLvoAUbLJ+IOO1SAtRmWKShsDIAPxCsrmm/JdY+RKM1GcJkoUXPv:VUZLvILJ+rg//v4IAPxR2GmpQrSt
Score
10/10
Malware Config
Extracted
Family
lumma
Signatures
-
Lumma Stealer, LummaC
Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
-
Lumma family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Setup.exe"C:\Users\Admin\AppData\Local\Temp\Setup.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
324KB
-
Filesize
324KB