Analysis
-
max time kernel
91s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
07-01-2025 00:03
General
-
Target
New folder/Setup.exe
-
Size
665.7MB
-
MD5
fdd6404bca6c3d345e63b5951702eeca
-
SHA1
54281052f8e27002a146a64ab8c12626c91040bc
-
SHA256
dc0c4d24bc55828f05ab6945e62f698b526013205b03bd30a2aaf1912ee364ae
-
SHA512
82459f5130eed8a8ec094b0fcc35d7c9c11f2157b4bc10843392436de81838645c1722286b67ae34a0c0452705370710ea484e6502c4b86080c79c76c6462654
-
SSDEEP
98304:tNDxwQ+8btvockyGcX+o7whyFxi5A/T2OV/GU2JIvXE7Ckgr09KPYitpMI3grY:Hh+8b3zj+owsxi5uT/VcRvj4mM
Score
10/10
Malware Config
Extracted
Family
lumma
Signatures
-
Lumma Stealer, LummaC
Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
-
Lumma family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\New folder\Setup.exe"C:\Users\Admin\AppData\Local\Temp\New folder\Setup.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
316KB
-
Filesize
316KB
-
Filesize
960KB
-
Filesize
7.9MB