Overview

overview

10

Static

static

3

d573900110...94.exe

windows7-x64

10

d573900110...94.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d573900110f023152d730786434988d8b95075b5dd8838ad7061ce202a689b94.zip

  • Size

    361KB

  • Sample

    250107-acc4ystrav

  • MD5

    4da1522a93c69fa34d7f237c560a5633

  • SHA1

    c16a0baba813260d0a3d2c12142c1dc0d31f493b

  • SHA256

    d573900110f023152d730786434988d8b95075b5dd8838ad7061ce202a689b94

  • SHA512

    49daf9f169d952af27a083a7069af2a010644140bdcf6959900a98579fa618acd3e372ae1218c5702c0cb68b30993a50e82e9086f30a12f82c7560628624b58f

  • SSDEEP

    6144:393C3BIpQDOw+oGuzTRpzW6I2gneo17Ru/So64ByEfEq5OiaIyMw:NSxIpQywJhBvto17RvfMbffXahMw

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      d573900110f023152d730786434988d8b95075b5dd8838ad7061ce202a689b94.zip

    • Size

      361KB

    • MD5

      4da1522a93c69fa34d7f237c560a5633

    • SHA1

      c16a0baba813260d0a3d2c12142c1dc0d31f493b

    • SHA256

      d573900110f023152d730786434988d8b95075b5dd8838ad7061ce202a689b94

    • SHA512

      49daf9f169d952af27a083a7069af2a010644140bdcf6959900a98579fa618acd3e372ae1218c5702c0cb68b30993a50e82e9086f30a12f82c7560628624b58f

    • SSDEEP

      6144:393C3BIpQDOw+oGuzTRpzW6I2gneo17Ru/So64ByEfEq5OiaIyMw:NSxIpQywJhBvto17RvfMbffXahMw

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks