General

  • Target

    #Pa$$w0rD__6654--0peɴ_Set-Up#.rar

  • Size

    12.0MB

  • Sample

    250106-x5s27svpdy

  • MD5

    d9c42b38326dcbb429d8d64735785586

  • SHA1

    b0234fc00a41213908979997639cdf97c8fa97ae

  • SHA256

    53e135d7af8ed00e2819b9dd44210d3b9980df8ff2f52652bb27d69cd37c0196

  • SHA512

    498b4c00558ee88d471bad55f452da0a3025473d4420b3ff24062f626a1cdbe59fa10ea6542035e584f100ef5b9ef2c4b26188c16c877bebdcd58db2dc092e48

  • SSDEEP

    196608:si6uJ6Cq4HBlYRNf2+6lPMlvesexYPgw5ywd2ylS1z4Clw/eZLCf4sXq5b:nxlYfN4P09PAw01jlw/eU4sax

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://displayclubby.sbs/api

Extracted

Family

lumma

C2

https://wholersorie.shop/api

https://framekgirus.shop/api

https://tirepublicerj.shop/api

https://noisycuttej.shop/api

https://rabidcowse.shop/api

Targets

    • Target

      Resources/info/Comparisons.pdf

    • Size

      78KB

    • MD5

      a218aa06e483e4678c2db61c3d7101b3

    • SHA1

      f1abbef646105ec0788713c9a82fad9531fedee1

    • SHA256

      aa66757df70c4fb7f3f8c44cf72ee6ce612d8dd9c8d695f613a6be1640659dd3

    • SHA512

      1c369be08cdd76de1b5204864835795953c7abbd1d790c408c41cc3c870e78a1f6abafd7dc56c035161ddd655d5482b966f76d15b11d5d42d4e66d74455c1cac

    • SSDEEP

      1536:paTxgNzRp3nld69Vn6X8b3Ww2Z7XJ8QuYhI2aBd7NQf5S7iEIde1YkrDl:+gnp3nEdb392Z7XJeQ8WuxrZ

    Score
    3/10
    • Target

      Resources/info/DIC Swatch ReadMe.pdf

    • Size

      313KB

    • MD5

      d93ef87527d57035e3086b88ca853579

    • SHA1

      18b7fcd3f9e33a219d81d0eb79f6895d9faa405a

    • SHA256

      9bac190d3a0beecca4c19d298d553c10300da1b753ffc1f9849ecfd4633018db

    • SHA512

      ac9c45402f754bbdfd958e0723184a9e601e265a107815ff2b1b0f9a95e021e7de0095a7fd3600d77dfa0f450c2b8eefc3461cb9e756168550f338d056472c06

    • SSDEEP

      6144:F9mr0PklFsXGsIADM5rVU0QMPXBNOMiRK6sUsEMxlRoTGIbEqOFhzNlp:fmrviGrkyrDQMvWdY6sVEY8bbExBp

    Score
    3/10
    • Target

      Resources/info/Design-issues.pdf

    • Size

      74KB

    • MD5

      3dfe7bc94d051f8744507d80a7ea65e8

    • SHA1

      757b8edcdd5dc02cec00b4024e817b5fc337acba

    • SHA256

      5f92ef23be6c1a6b8cc4be81abc65f65f01c12700405e01bb594f74a98789531

    • SHA512

      6b15bc33a7c871811962ae717d878aba6ba2fd4e275d8ad1f7b5f639943bc098b352fdffa2474e054c771c6919c2044d50c6952c6bd87c1cb6a8e680f30afe18

    • SSDEEP

      1536:iIhRyelDCd3YKpoymCEn/LvT/5D20hU3kT2P0ER0XwkG1Om:QelWd3PoVCg/Lb5/728ER0XyQm

    Score
    3/10
    • Target

      Resources/info/How-To CFF Extension.pdf

    • Size

      267KB

    • MD5

      180313065942d47df7858ade74cee19f

    • SHA1

      0371b23100df3fd5739585473c3718c4bf85e974

    • SHA256

      b085d1cdbcb15b6e8e12eb2b8f34d5e900509470bcfd49ab9565663960e2f38a

    • SHA512

      6764ac65d610b6f7e1f5c622a03752cef606840603285b5c49924f1a3f06c669c43a2d3083f3d823f457554a2205989e3d6b881189e3160a2e1adcbf21dd3996

    • SSDEEP

      6144:cbNke00sOHmmZx9VDwXJSCCCCCCCCCCCCMo6XHTa6aaFa50cZdD6N9S5uLJXe5n2:cRkNOHm0x9eXJSCCCCCCCCCCCCMTW5ed

    Score
    4/10
    • Target

      Resources/info/Introduction.pdf

    • Size

      68KB

    • MD5

      355089b46b60300d2c0a6f397404fc11

    • SHA1

      fc1f801427a9cde55a907aa3316b30fbede46faf

    • SHA256

      16d8c5cb8d2ecdb6ca174dcba1e5b0450caefa89226c79f376f9e67e9ca060d5

    • SHA512

      5f4349b2a664661446b0a7fa4b9a5fefbf55446886a2028f40043bd3ae70bfe5b5d4961915aeaafd5e7dd6ed8a9bbfa1431aea41ae79c3ebd8679cf854ccea0b

    • SSDEEP

      1536:HbXiyt80qkUCg/H75oIufPS50heuPkMUcY2GDEA7f8EoeP02wC+QND4brK:HFt/RNKoxTeuPfUL2IlXoePltmrK

    Score
    3/10
    • Target

      Resources/info/NEWS.pdf

    • Size

      475KB

    • MD5

      951af7e5c9f8649aba87836b7e0a5bc6

    • SHA1

      461a9f335c280bde86169123a7a6a52e78f29772

    • SHA256

      37c0c814257d592cdc9fa4f65981a5de73011e1394d193b23968ca0f75f3121f

    • SHA512

      26beb3339e2f72ad5433d7ff4f138fad494ae6225999089f6c4510d46d291d1bb53573e6f798d9a20fdffa6936e4a6fa95b6ec0a4fa1a51cc379d25f0a91bd0e

    • SSDEEP

      12288:puZbEcShGrMZS3lglOSZ/ApESaKT/fRSkgdwW:s1ohCFglOSZ/WESaQRSk0

    Score
    3/10
    • Target

      Resources/info/approximate.pdf

    • Size

      59KB

    • MD5

      55c89b1f20b11e702d840cbf4574b742

    • SHA1

      2f433886be63eb9d5d0b8eca6ecb6256c33cfd17

    • SHA256

      66b1e32463ea3a105cc89eff3cefd4cb3bd8560ac4690bb0ab5f3ae562890edf

    • SHA512

      354f4b526f95df1334e527840e5b99568a4051e5e1272e1e2ce6adb280bcb0538b10b50c72b04d68850b244d6c2f3cda1ed216ac9f3c0621ae1f54d6c15eba3b

    • SSDEEP

      1536:0H0KvhS8/tdlNXeVt5Aj+oaKcYsxh+inG:U0KvhZtdlNOVtL1uiG

    Score
    3/10
    • Target

      Resources/info/compete.pdf

    • Size

      288KB

    • MD5

      04b4784201699e30830a56fd900000ca

    • SHA1

      6036b4730837e180cbab31552045642dd54cb8c7

    • SHA256

      4569778d4d10719964e067f502e949a64243e13ea45c89e1c69a89d038613dda

    • SHA512

      84c7ec38722032c027b3f73bd815d61f61138365a6e6913f74e0ed4434108009a1d4d352f1c5504fe9830f8dae67b6b8a9939f88a99d87b78fab8c84db6ac3a6

    • SSDEEP

      6144:HKNeMbv5K4Mb8Nn7abZoDtR1K+DW+ss6a637cjUz5Lph:HLMbv5K4MbY7SZoBR1K+DZdJ63IjUzhP

    Score
    3/10
    • Target

      Resources/info/concordance.pdf

    • Size

      307KB

    • MD5

      39b8003af55644376fdc08c7e9cf03d4

    • SHA1

      2653c4d37847538ee9a35b4e65d925fe35e66322

    • SHA256

      b07bf7ff7308a79260fc2e76dbe0e9ea1c9a14316aa07e35059ba25b1e875a91

    • SHA512

      d05d1a0d1360cc3b52b6b9ca0ca901e4a72500d79d4f18674c827bcfa6528bc7406ec1a03eb3c6895e0aa4b1d7b3e1bf1edc9db4ec5440d7e47ac042c3bfcc72

    • SSDEEP

      6144:rurJeeKVjsEbId9ACcZJXkFvPejnl76FPLcvFk6kybzhInFnco:roee8j/8ZcjXkBPebl7MPLeJhInFco

    Score
    3/10
    • Target

      Resources/info/population.pdf

    • Size

      285KB

    • MD5

      ff01321dd785764e66f0f5fdf822933f

    • SHA1

      f1814fb3eddfa0c446e6f8441116b2a21800001e

    • SHA256

      bf40dc915a41dcb0d87c43134e9eef8756c72b59e4183d3dc19227b536bc1a7d

    • SHA512

      31bf1e85d9a7cc8cf071e0744f506d1539edebeb4f6928ea4b33612a6d3d3f2fe253a52284039550e7acbcb91b1dbae84228cebfb8091a238bff0648aaa7174c

    • SSDEEP

      6144:3fXZgmpaBVWVfPHYRsQN0HRm64F8ANTfGE1oOV:3fXSmpkoVXY3SHRcl71oOV

    Score
    3/10
    • Target

      Resources/info/tiedtimes.pdf

    • Size

      54KB

    • MD5

      8d740333911ac4177712068a39d1d202

    • SHA1

      99e1a2de62f89b3e2c56fc3d7574107f14ac0dd5

    • SHA256

      67d5a0aecf69e0e37cfc1fff8335b195c50834a3ca3b8470f708727b899b4b9c

    • SHA512

      eb5f274151526df149afa8a5cd1f8ec9035079035b0414f28101c94b8dcea161e1abe2a198a14e830b76d4572232a81da649ad36453ce1c6b110f68caefaaaf9

    • SSDEEP

      768:zAW8M9eBvcUab0f1lxzL0pmmI1MqcHjpHnSz+PITY0jvvoM6g/twR4RcYp:zBYB+b4/L0Uj4HRPMZrHbpp

    Score
    3/10
    • Target

      Resources/info/timedep.pdf

    • Size

      287KB

    • MD5

      73bd20d33d5226f435d4a555a6aae44d

    • SHA1

      631492d94bc2cd51026d6e2d55ce6c8109539284

    • SHA256

      3643ca67fe1e19e0bd5f740f69efdd3bd00b0fcfea378da0bebd2022fd1028d1

    • SHA512

      6b39d0020a66cb4a9d3c53e66219cfb30a0e704ff5bbaecc4f5af76b0c8362df8a43f2052518c8c58ac31268d103b059b6b2e20cb530076b134019762d950855

    • SSDEEP

      3072:eC8j2od8kC3CE3gaNxjcMcLLJkqVrgeGIykJIfwd7NGzC0HbQ4wtyUXxTOJfQT2x:j0lG/fqVrgSbJ9l4zztLgxTO/WKO4SG

    Score
    3/10
    • Target

      Resources/info/viewports.pdf

    • Size

      65KB

    • MD5

      8fa866fef8bd8c557e99683e687e210f

    • SHA1

      0e5852befd461d86a11db7e3d335991fef221ea6

    • SHA256

      5cf1a72edc5fad7fd8fbc66d35f81c032d24b4ceb1ce95174d8aec1c985d9a07

    • SHA512

      47f08489de79a74cedb30361c063d8ca4c7fc1eacdcc9cfc3b60b12bb370bbdb6c1e1175abb8b233632513c9eaa2892bf1d0663c0eb45de373adb4f5c58aace0

    • SSDEEP

      1536:VDeUYDZ88Up1XDSOWo3Rw0bHgEmbna3W1RS4Ag5jh7YxDm+:YU8TUp1W2K0Zmbam1Cgv+f

    Score
    3/10
    • Target

      Resources/madbasic_.bpl

    • Size

      4.8MB

    • MD5

      87c7564c40da2a25fc614fc1ea138109

    • SHA1

      d94d45ea14f81658cd0870360edb431dce2f905a

    • SHA256

      e25dad0f965929b6846f5386ae619b1ec6ead4d830bf3e08f2f2f8f2b2839a35

    • SHA512

      5123d5ad9218de104a0e635acdfcfdddc6dabeb75d36dd585d8be52df276338c0173d688d57028848b3c3efeca452ce3f1aa6b48b326e7fe59038e3a725ace94

    • SSDEEP

      98304:yl8EDEeHnbWGr+LZeedR83gN1kgZ+qkaqgI1y1Qom9Oz7wtGt8y3ETbm:yZFHbWG0Z3daQNegZ+cI1CN0mzT3ETbm

    Score
    3/10
    • Target

      Resources/maddisAsm_.bpl

    • Size

      64KB

    • MD5

      11efab4068cb4058207959e2638c2c1a

    • SHA1

      b1eac0879dcda14bdc0c2efd7f261d7c175208c3

    • SHA256

      11e3568f497c40331ee4a9e9973967e61b224e19204e09ed7451da3b74bd2ff5

    • SHA512

      ced6167612674232429c25e52ba051994b09fdaeaf3316505904456ef8d7063f2eb03b5a158f0a424f0ecb49673e6a3d6b57d61183c5f8402da3fe53af0bd185

    • SSDEEP

      1536:eNy3eqMne0sXB0IWtCLwEJhY0w1FwbiD7wlwei7:CqMnfIB04LwEJhY0w1UTnE

    Score
    3/10
    • Target

      Resources/madexcept_.bpl

    • Size

      438KB

    • MD5

      562ec96d0f65b0309ad7508d0e0ced11

    • SHA1

      0fe9dda664f4f8d9ae18603c5a25756710032a6f

    • SHA256

      fb64a5954b726d2d0f0bc26113a36dc8a86c469af994ceeaf2e2609743a0a557

    • SHA512

      876b82534764b2d156ce64d52771d38f245d330957287773f6b2360f48564b8d4a304449fa6f6400052165aaf433a191af2d3b38b194a9b1e892552dc0805fba

    • SSDEEP

      6144:XlAz49EKhEV30F8sl88nTjQ4Q50gEcW/jd+o72niVUNMa4Yn2lZ:XlG4ut30F8slzYlQcW/jd++2nJ6u2lZ

    Score
    3/10
    • Target

      Resources/rtl120.bpl

    • Size

      1.1MB

    • MD5

      e71e48e31ac728a6de7c020645f0c32f

    • SHA1

      7f86eadd1b7a0ab87b7ce7c2029bdef3d6fe1d8d

    • SHA256

      40a1d1a2f276738f568700ddccac99cdcd35b973fc8be86ab826c0d1abc9d6ff

    • SHA512

      5e41dbe7efac8a042a14c2f976d1afcd45e3f7531fb60daab61ac17ffd339d34e1c6746fce9e4b591b026598a89e38f36c6d24e33e2de0b39d81806259f9be2a

    • SSDEEP

      24576:0bhz5FWbA1msvIRzM7Rk5JZzSQ4+Is2D9Tx0gbo9:b2hTKgbo9

    Score
    3/10
    • Target

      Resources/vcl120.bpl

    • Size

      1.9MB

    • MD5

      9a438a75e68e88cdabc13074a17f8a52

    • SHA1

      97c94801d37d249ece7ba9aca05703303fd9cf06

    • SHA256

      ccccadde7393f1b624cde32b38274e60bbe65b1769d614d129babdaeef9a6715

    • SHA512

      19d260505972b96c2e5ae0058a29f61e606e276779a80732dbee70f9223dbff51dcb1f5e4eff19206c300ee08e6060987171f5b83ad87fdd8f797e0e2db529fc

    • SSDEEP

      24576:v2gt8PRUMggrgN/5tWw+eNVEXZB5SOCwhuuYY8RPyS9YEPI5yz6W:vRSf0Ww+NpPSyzYY8c8YEPI4+W

    Score
    3/10
    • Target

      Resources/vclx120.bpl

    • Size

      223KB

    • MD5

      8aaa3926885b3fa7ae0448f5e700cb79

    • SHA1

      47bd7d281ddde5ebef8599482212743bf2f7e67b

    • SHA256

      47396c301fbe78bfaf9e344936a0f7a4e6d174c096f847e160d822e48012162d

    • SHA512

      86d395ca89ec2a988f035ecb32640ddac99247e2568673246388fe310e8c3a44807049e8f3482fae86c453d5e3529a8f2daf8614a1086b6d979e64fd917bbe3a

    • SSDEEP

      3072:f4af8kXL6nX0YXjvkWQ5vYhbNkWPFOEJ8YZbjeTl0Y25zFgYBzRKy6sB65avEtAf:Qaf8kLWL7Xov8bNxdOmrfgYmHA6G

    Score
    3/10
    • Target

      Resources/x64/ExporterHost.dll

    • Size

      1.1MB

    • MD5

      5c42c9b2cc64ef614aef489427fe7b4e

    • SHA1

      dbce3f1c744f531c8f99d283dbbe8de040b2e2d6

    • SHA256

      2e0a72f73f3ba26e3c147cd24dfbb44f58fb4d421a7e57974c10a3874a52bb92

    • SHA512

      5960164b442f1bd0b0a2a43dc6dec6efaffb60cb4a29f27448508041216da6f0b3921f2ba47748a24151c1d32d10572489c2bcbd7fb5f681a741fb9aad7849d1

    • SSDEEP

      24576:nBgfWovkrA7xdDfo57UVitqQI+AzSn8teW:eeovaqYKz8eX

    Score
    1/10
    • Target

      Resources/x64/Microsoft.VisualStudio.Search.Implementation.dll

    • Size

      227KB

    • MD5

      10eb15d9c5be7c4f9f2747bd1afb2458

    • SHA1

      56a8d471a40b86fe06d11c0bace10349d0c37249

    • SHA256

      5bb809a8f23718a8deb62ccc7b117e1bb9c17976e6bd93eff4a44b110f9b3ee8

    • SHA512

      948d44d661cad802f8623f30ea429cda05fe7873a3d914bed0a42117cf1914a43366000d5c7f2ab2aa3c9e80a58590559bb4dd1ebb3ba2d80c10dbd41e52358b

    • SSDEEP

      3072:zNxGSB7Tkp2r+aH5EoTYBABPWlC1Yy9UhJCx+PRXc7n448zkEmp+KR3a2PBCsO:pLhTQ2pj7wlQVUaMtc738zkERKWD

    Score
    1/10
    • Target

      Resources/x64/Microsoft.VisualStudio.VisualC.Utilities.dll

    • Size

      213KB

    • MD5

      35bef154e0c3526bde8ca3622e8c3044

    • SHA1

      5dd4be9ee6a337458ce2407dce3a5d14c650f273

    • SHA256

      98af01cb023c78deaf2e4acdaf54371d05860f4d15fd8b4199e37fdbda602db3

    • SHA512

      a2f8fa63345999aea97875357c3fe7886c6b63077d1b3c3268f03e522542d77f2bf181d50ae184efdd5a111406867f8e953f1d319286f8dbb1695f0650221e42

    • SSDEEP

      6144:jCziTz2QBySc7PlIBKakEubc96OTuKUgjdCj:jKoz2Q6IBKB1c91SKUEc

    Score
    1/10
    • Target

      Resources/x64/SplFileObject_fgetcsv_escape_error.phpt

    • Size

      490B

    • MD5

      09101e05dc84d14c3790a90475187cbd

    • SHA1

      fcf8be22d625d5357722d74e4d87e5f0e26d4f74

    • SHA256

      51ebe128beb0699a6612086436fefc4a4eebaaf83017090557997383ad09a748

    • SHA512

      1f12d2df1a13445c2305c97723948cf37fb3edbbe6fdc18b2560fa550dc478524d39cb5684f4cfc4025dde4e3c8ff13b27e9f90e83505d719a3800a94c3758ae

    Score
    3/10
    • Target

      Resources/x64/msdia140.dll

    • Size

      1.4MB

    • MD5

      7def9b1ae1bbc5d60a353ec890ed338d

    • SHA1

      4b35ecac20bbc532c6c42da5da3b061a6f7ba7e0

    • SHA256

      2b60e153d8ce1d529dcfa7bf5fd07d6a6b2daf5f3f05f46745eea95021a51802

    • SHA512

      ef8f18b2434cbce47e490307c5a2fdc57cbea3bdedf37985ae6ab0a905d5891ce31afc9a18b13f7e6839fd7c8bfa89d7400eb6fb22d3ef41c38bff48a74ba88c

    • SSDEEP

      24576:zqKzsf5o3rOH6y/Uq6timipdz7LAfT0bebHrmaiPMi:GKc6iRbebH6aiPV

    Score
    1/10
    • Target

      Resources/x64/pdo_mysql_stmt_closecursor_empty.phpt

    • Size

      2KB

    • MD5

      bda817680d2fcf435e6f4a5c02a1575e

    • SHA1

      c9288f2cf8992ecab832a44c9a11ef6a31222683

    • SHA256

      e101c9edac4c71103c0d821b8077ce257458ef027f7520719bbacf60781c9136

    • SHA512

      9bd535ae8e7ad4d69968d3e12db3132690b78dd174c966864ed266374f479dd2a28c3eca89b3fc3826f3b93a5afc33edb54cd3827b3bdbfd4b282c7b4ccff6ba

    Score
    3/10
    • Target

      Resources/x64/phar_oo_006.phpt

    • Size

      945B

    • MD5

      873c07e6110e2b093b5533d53fe02706

    • SHA1

      c0f03a714e11aa434973df57b4496ee5dfc66634

    • SHA256

      ad1b2b12e611d1b33944544f373b44d859bd354716c00186ce3b76baa10d4db3

    • SHA512

      80a9c7e06f252d0ee2ca55982e539ba0dad8c7a4b0cce310731f092c2555577b374c99a0e4a4516fbf58911ce3e88ee60f602f114e9d88929f9cb04b048c9ff6

    Score
    3/10
    • Target

      Resources/x64/try_multicatch_007.phpt

    • Size

      398B

    • MD5

      0ae10b5a262b1c585840c27f230af9b1

    • SHA1

      5f22a8a97b3b18d64e6df22bda76e7290529c9ea

    • SHA256

      477b23e295bb09960cca04b676853c2038fd93e5ba87f92ec17ef632192e557e

    • SHA512

      66ee8074e136ce73c742894d69cc546515dfe67075227dd6069011638e6514bcbf74dccd6c374345f25860cb13c8e065683ed0535ace94fc43055f339ec13999

    Score
    3/10
    • Target

      Resources/x86/bug64007.phpt

    • Size

      747B

    • MD5

      752feede3f76f05f53a8910b1d018d42

    • SHA1

      0f940b348732686948502c88e3f1f42ae74479f5

    • SHA256

      83edaaca206481ff1fb220e0aaf602804ae1e788ded802763575db25d9a82149

    • SHA512

      2751868e2455ab1a1be6475b512e136c38ad91bcca38f916bbcf7b74a477e34e081a508a6ed3c6dc327f6c8ef51de9222953a009fa56f591850602e6cec4aad2

    Score
    3/10
    • Target

      Resources/x86/foreachLoop.001.phpt

    • Size

      956B

    • MD5

      4ffedada6d444499fc98e583e3410b9a

    • SHA1

      0386f5a0b203155fa55296a22c262227a2be934a

    • SHA256

      760e7a3ee7e203a655ababc23eed823615276aa44e0e91049fb49d0474243ecf

    • SHA512

      1ba61b7b722661d5114cab21b3c24e8347c34a9fc8431625831584632dadcb524deb9422eceecc6853c9126eab5fb8c3934bcdfe77bc43fe9ca956132f0a2127

    Score
    3/10
    • Target

      Resources/x86/indirectFcall.phpt

    • Size

      903B

    • MD5

      0dc5b2b01be9e73b87b72ba0c3d1b69c

    • SHA1

      0c677e7110b519271a23a5d435627a00eab7e7b2

    • SHA256

      519755f0020b9f523a0923f6fbcd6aebc806b885b861daed080d9bc8e259393b

    • SHA512

      ab2262fc25ffe34f5df02caab547c79e5b057ffeda45c082820d4e99e5f7876fbd0dac904f7f374f523a7409ba6a3b11ac767da485bfb0e2328ff9f91439ecd0

    Score
    3/10
    • Target

      Setup.exe

    • Size

      70.0MB

    • MD5

      a54611d7c28886682009becc3bbb6888

    • SHA1

      a9e11545cb9a6f86c6858f098ed56f1f72a970d8

    • SHA256

      cc1a9c470713c663d93d5c15406553926d8472bf7511ca82b5e4c31df9802d7f

    • SHA512

      9e2c45c17264c1e31ddfc31b0faa0b0e244a9d37ac564812ebe4e4890c2efb12cf466353476418c70bbd2f4cd0872bfb04362acc0b127cec06cf5bd2cfd24501

    • SSDEEP

      24576:k9cwUdP4s82RZeDeb7i1dyaYkfACBvl0NMg+KUBqaZPihwjU:jEfceDdYkxl0cFZPS

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks

static1

pdflink
Score
4/10

behavioral1

discovery
Score
3/10

behavioral2

discovery
Score
3/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
4/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

execution
Score
3/10

behavioral24

Score
1/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

lummadiscoverystealer
Score
10/10