Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    07-01-2025 00:03

General

  • Target

    98f2344ed45ff0464769e5b006bf0e831dc3834f0534a23339bb703e50db17e0.exe

  • Size

    2.5MB

  • MD5

    87330f1877c33a5a6203c49075223b16

  • SHA1

    55b64ee8b2d1302581ab1978e9588191e4e62f81

  • SHA256

    98f2344ed45ff0464769e5b006bf0e831dc3834f0534a23339bb703e50db17e0

  • SHA512

    7c747d3edb04e4e71dce7efa33f5944a191896574fee5227316739a83d423936a523df12f925ee9b460cce23b49271f549c1ee5d77b50a7d7c6e3f31ba120c8f

  • SSDEEP

    49152:CAT1rDm9Jeg99E2spwr44UaaDB8v+oyLfwt3LE3eFqZHNZ25WYDo6fsWc6jlOaSo:CATNI9G2sOr44UaaDB8moVt3LE3eFqZw

Score
10/10

Malware Config

Extracted

Family

lumma

Signatures

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

  • Lumma family

Processes

  • C:\Users\Admin\AppData\Local\Temp\98f2344ed45ff0464769e5b006bf0e831dc3834f0534a23339bb703e50db17e0.exe
    "C:\Users\Admin\AppData\Local\Temp\98f2344ed45ff0464769e5b006bf0e831dc3834f0534a23339bb703e50db17e0.exe"
    1⤵
      PID:1524

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1524-2-0x0000000000270000-0x0000000000370000-memory.dmp

      Filesize

      1024KB

    • memory/1524-3-0x0000000000270000-0x0000000000370000-memory.dmp

      Filesize

      1024KB

    • memory/1524-4-0x0000000000150000-0x00000000001A6000-memory.dmp

      Filesize

      344KB