Overview

overview

10

Static

static

1

exlaunch2.html

windows10-ltsc 2021-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    exlaunch2

  • Size

    69KB

  • Sample

    250102-3ex65azlgs

  • MD5

    b4302098b433bcbe1ff0c827ee6c241c

  • SHA1

    6f5f6ca9798e0ded6360e967cbdf70327508bba6

  • SHA256

    91aee8007dbf9e763c1c0d52f7f07f9b831a4beb4a9f1b129fe48fcbf4f1200e

  • SHA512

    1b47a143385cae8cc268f74059d39a9b42dfb1981bd2daff9ed34332f4de67a6431a2b9e608ca019033ca028c7db186eff0e5e9656c6f6cfbe46edd68682d217

  • SSDEEP

    1536:O8zBPf8zBTdqjkbTM2Cx5SMEwEpXSM12EMAspEpnWFSQovq6fqPJ:bEqx5SMETXSMFMvEISQovGJ

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://hummskitnj.buzz/api

https://cashfuzysao.buzz/api

https://appliacnesot.buzz/api

https://screwamusresz.buzz/api

https://inherineau.buzz/api

https://scentniej.buzz/api

https://rebuildeso.buzz/api

https://prisonyfork.buzz/api

Targets

    • Target

      exlaunch2

    • Size

      69KB

    • MD5

      b4302098b433bcbe1ff0c827ee6c241c

    • SHA1

      6f5f6ca9798e0ded6360e967cbdf70327508bba6

    • SHA256

      91aee8007dbf9e763c1c0d52f7f07f9b831a4beb4a9f1b129fe48fcbf4f1200e

    • SHA512

      1b47a143385cae8cc268f74059d39a9b42dfb1981bd2daff9ed34332f4de67a6431a2b9e608ca019033ca028c7db186eff0e5e9656c6f6cfbe46edd68682d217

    • SSDEEP

      1536:O8zBPf8zBTdqjkbTM2Cx5SMEwEpXSM12EMAspEpnWFSQovq6fqPJ:bEqx5SMETXSMFMvEISQovGJ

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks