Analysis

  • max time kernel
    148s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-01-2025 00:03

General

  • Target

    98f2344ed45ff0464769e5b006bf0e831dc3834f0534a23339bb703e50db17e0.exe

  • Size

    2.5MB

  • MD5

    87330f1877c33a5a6203c49075223b16

  • SHA1

    55b64ee8b2d1302581ab1978e9588191e4e62f81

  • SHA256

    98f2344ed45ff0464769e5b006bf0e831dc3834f0534a23339bb703e50db17e0

  • SHA512

    7c747d3edb04e4e71dce7efa33f5944a191896574fee5227316739a83d423936a523df12f925ee9b460cce23b49271f549c1ee5d77b50a7d7c6e3f31ba120c8f

  • SSDEEP

    49152:CAT1rDm9Jeg99E2spwr44UaaDB8v+oyLfwt3LE3eFqZHNZ25WYDo6fsWc6jlOaSo:CATNI9G2sOr44UaaDB8moVt3LE3eFqZw

Score
10/10

Malware Config

Extracted

Family

lumma

Signatures

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

  • Lumma family
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\98f2344ed45ff0464769e5b006bf0e831dc3834f0534a23339bb703e50db17e0.exe
    "C:\Users\Admin\AppData\Local\Temp\98f2344ed45ff0464769e5b006bf0e831dc3834f0534a23339bb703e50db17e0.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1600

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1600-2-0x00000000010E0000-0x00000000011E0000-memory.dmp

    Filesize

    1024KB

  • memory/1600-3-0x00000000010E0000-0x00000000011E0000-memory.dmp

    Filesize

    1024KB

  • memory/1600-4-0x00000000010E0000-0x00000000011E0000-memory.dmp

    Filesize

    1024KB

  • memory/1600-5-0x0000000000400000-0x0000000000456000-memory.dmp

    Filesize

    344KB