Analysis
-
max time kernel
94s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
06-01-2025 21:56
General
-
Target
lumma.exe
-
Size
364KB
-
MD5
b15776890bae6edf6164c572c44eb132
-
SHA1
5eeccdf28029916d4f0507dae50204009c23406b
-
SHA256
301907b8bbee7f28145fa961545a17bc4a035e3dc6c3a36968772e5b0ed2dd9d
-
SHA512
c68c564fa8a32da49650dbec724f96ff3925f85422ac6d8aadc21e72486707bfaf09c4f62b56cc1f31d7b1e1ecbf687e106a82926286a0313cee6e6558f3e291
-
SSDEEP
6144:aA6xKh6ckttv2vzCYaF82Dx6AU/AbMQTKhCVnltn43J7:XkKh6c5bCYaF824EMQ+hCZlq
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\lumma.exe"C:\Users\Admin\AppData\Local\Temp\lumma.exe"1⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4068 -s 2162⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4068 -ip 40681⤵