Overview

overview

10

Static

static

3

GetWindowText.exe

windows10-2004-x64

10

GetWindowText.exe

windows11-21h2-x64

10

Resubmissions

31-12-2024 21:59

241231-1v9tratpbq 10

30-12-2024 05:30

241230-f7gzaazlel 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e729daffefc8101b3bd5a9a7130ef8ffbc8a560535079910c0119c9c0fbaec7b.zip

  • Size

    6.2MB

  • Sample

    241231-1v9tratpbq

  • MD5

    6e8638849f6bfb09cb99fc63499abb9f

  • SHA1

    aa84fca3f056d18933b380db98a2af36e3725bf0

  • SHA256

    e729daffefc8101b3bd5a9a7130ef8ffbc8a560535079910c0119c9c0fbaec7b

  • SHA512

    58f72487ce18ac72a6ebdef984a0410707e6817c41a86356cc49f9861d8e3848b76cef32aad594f85b7511567f514fe12e045ce9860bec4eee001ede75d3cb45

  • SSDEEP

    196608:3WxBTDA02tPX0pvb2Mauk2o2ljoh/jTAMkAlo6:3WLDpvX82le/4MkAlJ

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://delaylacedmn.site/api

https://writekdmsnu.site/api

https://agentyanlark.site/api

https://bellykmrebk.site/api

https://underlinemdsj.site/api

https://commandejorsk.site/api

https://possiwreeste.site/api

https://famikyjdiag.site/api

https://pittyshishre.site/api

Targets

    • Target

      GetWindowText.exe

    • Size

      15.4MB

    • MD5

      0141218db46a90c6be83be35bacd11c8

    • SHA1

      9e36f66451ba8517916a816187971003766e1cdd

    • SHA256

      92404a009eff4b32a0370d5e590d857ba83b031478aa74e6f6767460c5372830

    • SHA512

      73bdec7cb49619ce331150ececabe5244e1ec4006b913aa31ad846dbb2a11328c18ce3e26920b9ece86a50c6ddf9eddf1110d8705eae272da2f98f39f3db5aa1

    • SSDEEP

      98304:zvPKiLGgWW89QWcCpfvmaGYGLkqgyllIaSD06mSwjOw07kiUFfOK1oUpIXVqoo8:lqVcuSYMCDpmSQco

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks