Overview

overview

10

Static

static

3

Aura/Aura.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Aura.zip

  • Size

    55.9MB

  • Sample

    250102-w6f9cstpfp

  • MD5

    1fb353573d14e86191f3cef7279f7600

  • SHA1

    a1a838fda840676ba37eab567ba3857f3830c5c9

  • SHA256

    f6260cef4589387d28ab99752ee2421b90bfff486eafdf3dca424201793c0732

  • SHA512

    f6e0d440ea058f96d7c9a44a3deea58b6355e9fa9030795a4306678676b8a5f5d3307b660c4ff2398e7535a311ede70ba1cbe196a2ffc17174663aeb85ffbe15

  • SSDEEP

    1572864:Y2wZ9ZAvBe1unnnKToPHdPfd1TJT+GRjgCNUf09zsCbiw0:YVqvBesnKA/RRjgCNC09zT/0

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://fancywaxxers.shop/api

Targets

    • Target

      Aura/Aura.exe

    • Size

      755KB

    • MD5

      289c7cbc5a676ae7ea5548d85373cad2

    • SHA1

      528cff68316e9bb8e5623f7b149e79f9743f001f

    • SHA256

      274f8c00140a76a6fcc145cffb21cd7b99afa0b15b035401ce076c7ea77ec565

    • SHA512

      fb507accab88b02a02f1de73e61a6de8236ae32560883be9e40a5917ffc87a1057c0b8cece83d8fc39ce432dae87ca5537fc83ba81b0664d003acf7fac6b84a7

    • SSDEEP

      12288:NLpVo1Frg4Ss68i6AmclkOhFcZD3Tn/A6YECLZ+D4QxiA0iXGlhtyAI9mivokHPm:5pGrB68i6AmohyZrrfAUD4Qxisct

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks