Overview

overview

10

Static

static

3

SKRIPT-GG-...GG.exe

windows10-ltsc 2021-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SKRIPT-GG-main.zip

  • Size

    621KB

  • Sample

    250104-r88n6stpfw

  • MD5

    9709398f907115268adf4cbc2113fe88

  • SHA1

    226cde8479fe230e115334cff8d6cb8cea6d64f1

  • SHA256

    77780c705db20859d8230644699cbdfd3ddd97bce143dc6eaf6a2b388f7e2fe8

  • SHA512

    04b33d2848cd4c5184edc1be6cf9ca53d6831f0320c0b3d6fa88c2b106a0c3cde27bc0a0ebfc3823182fd5c00f2a48f25ece91ea2d18360c4be152b3bfa96bfa

  • SSDEEP

    12288:ZQM6rE5Mq6Je+wPozDOLFRGHphDBBmoU0SmwwE0OMmJ0TzH548j1zgBj7:fSEEZU+aAzBlSzEfTzH5QBn

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://impend-differ.biz/api

https://print-vexer.biz/api

https://dare-curbys.biz/api

https://covery-mover.biz/api

https://formy-spill.biz/api

https://dwell-exclaim.biz/api

https://zinc-sneark.biz/api

https://se-blurry.biz/api

Targets

    • Target

      SKRIPT-GG-main/SkriptGG.exe

    • Size

      686KB

    • MD5

      b6ffc5ab3d9c3d132b0cdb490ed800d2

    • SHA1

      69f55a57d6353649c3f709163bb7d440a3a7eb7f

    • SHA256

      138671f56898c4504a02588c6f9c4de6a3961ce015bb147d579bd54bc454ded1

    • SHA512

      4163a1537f80ef49a9ec9dd17b7bfb442be57afb24519d753ee2e2ba99c443e555b69570218aa1ee3a0e7b6419eb2432089d69f8c9f5771ada0115f2965f0f5d

    • SSDEEP

      12288:rlGQs6nEzMMU1wYwFozDOVhRGHdhdBBmCU0SmegE0wgoNkTzD5NryZI5L36lo+Qv:MEEIDU+acZBxST0bbzD5Nre

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks