Overview

overview

10

Static

static

7

yoyuds_build.exe

windows7-x64

10

yoyuds_build.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6608f27dbd3c5a6b6e4e2d67d04c2656b1436bcd68dedbe8552a4139bf279eaa.zip

  • Size

    341KB

  • Sample

    250107-acdeqawnck

  • MD5

    a39ed623aef63d5c11bb013ecf051ea9

  • SHA1

    930d8d0f47937eaa31839f81e7a6c20a5210e551

  • SHA256

    6608f27dbd3c5a6b6e4e2d67d04c2656b1436bcd68dedbe8552a4139bf279eaa

  • SHA512

    fbbdb3f9dc55a16815c3ff7f2e42f222cac63d604ffa4805c895c27e11f6f6cf757c4893f55b13b53fe33b401e9671e79eb74e38f9bf4f8dfc25659cda601f3c

  • SSDEEP

    6144:j+oMi/gsucRGvDyYxNe+mltbo3oFKW7rXBOfXTI8LMg6I9Oo4QJfm/U3iP:ZMsgsupvFL483oYW7rXCXkIZEJQJfjyP

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://fancywaxxers.shop/api

Targets

    • Target

      yoyuds_build.exe

    • Size

      361KB

    • MD5

      c14b3e5e05e6005210183dd918b1dd2d

    • SHA1

      32ade9c1c473af583d67a2d170c5f9a4e31ea949

    • SHA256

      0eb552b6985668e7bffb1ccc3cbe69d05af1efc7d1f2916d728836ebf08275a9

    • SHA512

      5b2cdb94c92fb9d82747642e238cc18d4c8580e88ed2f3c67ffc3c813a512db4c4476cd4eb24775d72a78829d2f7d00929e15455f66d1820264acf33e75cbc66

    • SSDEEP

      6144:6hRMi/MsuKRGvpyYxNeamPtboFojK47rXBUfXbI8LM26I1Oo4QDfmgU3iw:6/MsMsuzv/t08Fo+47rXsXcI5cJQDf21

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks