Overview

overview

10

Static

static

1

winnxyyy_c...AB.exe

windows10-2004-x64

10

winnxyyy_c...AB.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    winnxyyy_crypted_LAB.exe

  • Size

    548KB

  • Sample

    241231-z6g3fazlfs

  • MD5

    83614dc842994c0adabd914b7273d6cc

  • SHA1

    4600ed64d6d42dec8f26d503b3af6af2c183a44f

  • SHA256

    848ccff6a8e523f7e0a7a787b480adad7cf7d0ec6a93362a6a3e94e0e5e93e8d

  • SHA512

    6f7b44a2ef78d18a506e13ac222da847294c9bd22f633b36aa4f5ebafe1adacca0c012f705aceae5275c62f75b83a2abed51f675229254be6d887142fb404c98

  • SSDEEP

    12288:8YO6Dqzihouxpa+yWpYa2q+I3jv6W4tCbgzvPoJgBwg0rPEO:5O6DThou2+yAYq+c4tEqv4WQrPt

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://hummskitnj.buzz/api

https://cashfuzysao.buzz/api

https://appliacnesot.buzz/api

https://screwamusresz.buzz/api

https://inherineau.buzz/api

https://scentniej.buzz/api

https://rebuildeso.buzz/api

https://prisonyfork.buzz/api

Targets

    • Target

      winnxyyy_crypted_LAB.exe

    • Size

      548KB

    • MD5

      83614dc842994c0adabd914b7273d6cc

    • SHA1

      4600ed64d6d42dec8f26d503b3af6af2c183a44f

    • SHA256

      848ccff6a8e523f7e0a7a787b480adad7cf7d0ec6a93362a6a3e94e0e5e93e8d

    • SHA512

      6f7b44a2ef78d18a506e13ac222da847294c9bd22f633b36aa4f5ebafe1adacca0c012f705aceae5275c62f75b83a2abed51f675229254be6d887142fb404c98

    • SSDEEP

      12288:8YO6Dqzihouxpa+yWpYa2q+I3jv6W4tCbgzvPoJgBwg0rPEO:5O6DThou2+yAYq+c4tEqv4WQrPt

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks