Overview

overview

10

Static

static

3

548a5adc24...ab.exe

windows7-x64

7

548a5adc24...ab.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    548a5adc2493d9eae29a66f9d55ecabccc97f1817f05f7900b14f0de30dd75ab.zip

  • Size

    620KB

  • Sample

    250107-acmndswpbk

  • MD5

    23453dfe432822281da99b40f20c60e0

  • SHA1

    ac84775458d409ea7ad886d3c1edac47d5ce6cf6

  • SHA256

    548a5adc2493d9eae29a66f9d55ecabccc97f1817f05f7900b14f0de30dd75ab

  • SHA512

    dc20c9abb815d84c98ddf063cf7e890dcd8a6b73a90acaddc6e613b482c20416cf063b4185c48103402b12a6e94545b1441a0fc720f85c9322c08a9e0ec81ef8

  • SSDEEP

    12288:mOJc8wJkkPVsg0f1K0+MV/Co6/dEfl+6ROwf+CeLZYJXH6u5KcR10HIHQcX/6QwR:hlwJ5tsLYiCl/qfl

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://caffegclasiqwp.shop/api

https://stamppreewntnq.shop/api

https://stagedchheiqwo.shop/api

https://millyscroqwp.shop/api

https://evoliutwoqm.shop/api

https://condedqpwqm.shop/api

https://traineiwnqo.shop/api

https://locatedblsoqp.shop/api

https://approoverowps.shop/api

Targets

    • Target

      548a5adc2493d9eae29a66f9d55ecabccc97f1817f05f7900b14f0de30dd75ab.zip

    • Size

      620KB

    • MD5

      23453dfe432822281da99b40f20c60e0

    • SHA1

      ac84775458d409ea7ad886d3c1edac47d5ce6cf6

    • SHA256

      548a5adc2493d9eae29a66f9d55ecabccc97f1817f05f7900b14f0de30dd75ab

    • SHA512

      dc20c9abb815d84c98ddf063cf7e890dcd8a6b73a90acaddc6e613b482c20416cf063b4185c48103402b12a6e94545b1441a0fc720f85c9322c08a9e0ec81ef8

    • SSDEEP

      12288:mOJc8wJkkPVsg0f1K0+MV/Co6/dEfl+6ROwf+CeLZYJXH6u5KcR10HIHQcX/6QwR:hlwJ5tsLYiCl/qfl

    Score
    10/10
    discoverylummastealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks