Overview

overview

10

Static

static

1

Echelon.exe

windows11-21h2-x64

10

Resubmissions

31-12-2024 09:52

241231-lwa99avmet 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Echelon.exe

  • Size

    6.4MB

  • Sample

    241231-lwa99avmet

  • MD5

    cbdef49d32cf66bfa4c8a86d225b11bd

  • SHA1

    bc2ce52834c6a615a8bd5d3b6aafd25239d03b44

  • SHA256

    4e6c7876342928a4ca103e27e2a0823c0e8df2457ba32e5d62fcf94cb111a477

  • SHA512

    84c6a436250dc12c2055c75abd318c07408c314388ac3c3209d22985955cb2d1cc9e916f29fb10d9257cb3d995a72cf91be83258e3151b6a0eda36125b831adb

  • SSDEEP

    196608:YkywgD6ytCV8NxxKQP8v0ojDIg9Cbk/V8e:pyp621P8vXDd

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://impend-differ.biz/api

https://print-vexer.biz/api

https://dare-curbys.biz/api

https://covery-mover.biz/api

https://formy-spill.biz/api

https://dwell-exclaim.biz/api

https://zinc-sneark.biz/api

https://se-blurry.biz/api

Targets

    • Target

      Echelon.exe

    • Size

      6.4MB

    • MD5

      cbdef49d32cf66bfa4c8a86d225b11bd

    • SHA1

      bc2ce52834c6a615a8bd5d3b6aafd25239d03b44

    • SHA256

      4e6c7876342928a4ca103e27e2a0823c0e8df2457ba32e5d62fcf94cb111a477

    • SHA512

      84c6a436250dc12c2055c75abd318c07408c314388ac3c3209d22985955cb2d1cc9e916f29fb10d9257cb3d995a72cf91be83258e3151b6a0eda36125b831adb

    • SSDEEP

      196608:YkywgD6ytCV8NxxKQP8v0ojDIg9Cbk/V8e:pyp621P8vXDd

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks