Overview

overview

10

Static

static

3

Pastebin/p...v3.exe

windows7-x64

10

Pastebin/p...v3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    83fcf034139f6946409b3b26b3ff4b11ade5da0846be16e8b2ea111991138d48.zip

  • Size

    429KB

  • Sample

    250107-ac794avkfs

  • MD5

    62fcb6e511e620f256b114241684b56f

  • SHA1

    6006468463ab42184a0ec239999f56637da8f1d2

  • SHA256

    83fcf034139f6946409b3b26b3ff4b11ade5da0846be16e8b2ea111991138d48

  • SHA512

    397a37063d8029e297d78c6960502873ae432968da383ed86d26b64053f63e93968776d7a7d880274323f3ee0944a768d82e06c1c6688aa320c8a8f102d837e7

  • SSDEEP

    6144:eXQ4mR9a2KVId3C+IwIhLS/V0E7+odJ6vsVnsoooAPmIV+9g2/GzftXAxGS6bxj7:wQ78q3OAVbv6vsV8zI9t/Gzf9AorNP6U

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://fancywaxxers.shop/api

Targets

    • Target

      Pastebin/pastebin v3.exe

    • Size

      522KB

    • MD5

      550dfa2ae090af1b0ffce545c21b5836

    • SHA1

      8ec7129c91e991f99d987649609bd38113bb5d81

    • SHA256

      978183adf9f5914494c9753457d01695be6dd94ccf077b3badea86f12b799cb3

    • SHA512

      fae5d813e6757cd30dfffff0694570e7c714f06ce640d1dad4709ab6fad64afd4a765b220ca0a14ea8ba3dd9bd1b2bc739e2cad29cdd12e14485ed552b496d59

    • SSDEEP

      12288:DztE0u86qlmk/345zA7Fv6vsVOzm9t/Gzr9AsrNP6f:DO0uYlmsozAAvsYkGzrxNw

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks