Overview

overview

10

Static

static

3

ScriptV8.exe

windows7-x64

10

ScriptV8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ScriptV8.exe

  • Size

    358KB

  • Sample

    250105-sgegpazlbm

  • MD5

    3d0e51bb2b2c694d6721c9cb2de9f0f8

  • SHA1

    895b9ea08a475dd2972d784328cf1514d9e247e6

  • SHA256

    3e80cf204ecc949040ef73c45d7ba8b27d3ec04f4ff73671a7e595af7d9e685b

  • SHA512

    f124827e4b85407f2359f1df9c254cc999205d33116a4c5df3b30e0b1a50a1a85cda3b5d4e951a327af9a95b5c124917844add587699bca1fbb8a30706771a28

  • SSDEEP

    6144:e9XhFJ2ZJUzLhX+oRdfvl/HxkU++Ql36XMMs7cVRK85xm9tGRDytvl6D5w2fAVY:2rJsJUzLhJ3l/RkU+b3lAVDgTGROtt6X

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://fancywaxxers.shop/api

Extracted

Family

lumma

C2

https://fancywaxxers.shop/api

https://abruptyopsn.shop/api

https://wholersorie.shop/api

https://framekgirus.shop/api

https://tirepublicerj.shop/api

https://noisycuttej.shop/api

https://rabidcowse.shop/api

https://cloudewahsj.shop/api

Targets

    • Target

      ScriptV8.exe

    • Size

      358KB

    • MD5

      3d0e51bb2b2c694d6721c9cb2de9f0f8

    • SHA1

      895b9ea08a475dd2972d784328cf1514d9e247e6

    • SHA256

      3e80cf204ecc949040ef73c45d7ba8b27d3ec04f4ff73671a7e595af7d9e685b

    • SHA512

      f124827e4b85407f2359f1df9c254cc999205d33116a4c5df3b30e0b1a50a1a85cda3b5d4e951a327af9a95b5c124917844add587699bca1fbb8a30706771a28

    • SSDEEP

      6144:e9XhFJ2ZJUzLhX+oRdfvl/HxkU++Ql36XMMs7cVRK85xm9tGRDytvl6D5w2fAVY:2rJsJUzLhJ3l/RkU+b3lAVDgTGROtt6X

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks