Overview

overview

10

Static

static

1

23aea7e9d3...93.ps1

windows7-x64

3

23aea7e9d3...93.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    23aea7e9d32f547db65c086e7d067439588d3f6599f13090679787385bbf2b93.ps1

  • Size

    513KB

  • Sample

    250103-dw4ykazqcp

  • MD5

    979c81c2d61e875e5634a5874d50f402

  • SHA1

    282f92e764c81121553f2e31035f88e5b0803a01

  • SHA256

    23aea7e9d32f547db65c086e7d067439588d3f6599f13090679787385bbf2b93

  • SHA512

    2d6f6fca8b81d27f9378b4d9cd83e54d7209754f2a5535f2a1133ff29ccdd4428d2845c862b55e71f7ef760c641e1e30433387ae50512c494b8b74430f1524a1

  • SSDEEP

    12288:rrSE6qcSyjKO2E1WvnbYToYQSD7PJLuzJj5wD:6Dqch2O1WfbYTBDzduhOD

Score
10/10
lummadiscoveryexecutionstealer

Malware Config

Extracted

Family

lumma

C2

https://hummskitnj.buzz/api

https://cashfuzysao.buzz/api

https://appliacnesot.buzz/api

https://screwamusresz.buzz/api

https://inherineau.buzz/api

https://scentniej.buzz/api

https://rebuildeso.buzz/api

https://prisonyfork.buzz/api

Targets

    • Target

      23aea7e9d32f547db65c086e7d067439588d3f6599f13090679787385bbf2b93.ps1

    • Size

      513KB

    • MD5

      979c81c2d61e875e5634a5874d50f402

    • SHA1

      282f92e764c81121553f2e31035f88e5b0803a01

    • SHA256

      23aea7e9d32f547db65c086e7d067439588d3f6599f13090679787385bbf2b93

    • SHA512

      2d6f6fca8b81d27f9378b4d9cd83e54d7209754f2a5535f2a1133ff29ccdd4428d2845c862b55e71f7ef760c641e1e30433387ae50512c494b8b74430f1524a1

    • SSDEEP

      12288:rrSE6qcSyjKO2E1WvnbYToYQSD7PJLuzJj5wD:6Dqch2O1WfbYTBDzduhOD

    Score
    10/10
    executionlummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks