Overview

overview

10

Static

static

3

ee3bcea3ac...aa.exe

windows7-x64

7

ee3bcea3ac...aa.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee3bcea3ac91ee01a3c4044615a2b9f4667dec5dd54f5935ab3ea23cc1c5e4aa.zip

  • Size

    718KB

  • Sample

    250107-ar6ptavqhz

  • MD5

    b4c67501b2783a3c86c8a9b98a5d6798

  • SHA1

    9398be29fc39ce17e01d627050958e2600b324dc

  • SHA256

    ee3bcea3ac91ee01a3c4044615a2b9f4667dec5dd54f5935ab3ea23cc1c5e4aa

  • SHA512

    84e46ae5711d0585d7e6c5114c3d28b2192fd69228a64f13080ef1b3c99bf40debcb5d82accaeaae0a77d5bae8691edda19eefd8484851ab24108f8735160da0

  • SSDEEP

    12288:1yAtZvj0KxDQsJJr+rwFoKseqaT3ChHLpSjOL1xWONh6WekeI1K5LUpzpVIK8U6+:1yAtmEBQwFHfZTy

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://impend-differ.biz/api

https://print-vexer.biz/api

https://dare-curbys.biz/api

https://covery-mover.biz/api

https://formy-spill.biz/api

https://dwell-exclaim.biz/api

https://zinc-sneark.biz/api

https://se-blurry.biz/api

https://spellshagey.biz/api

Targets

    • Target

      ee3bcea3ac91ee01a3c4044615a2b9f4667dec5dd54f5935ab3ea23cc1c5e4aa.zip

    • Size

      718KB

    • MD5

      b4c67501b2783a3c86c8a9b98a5d6798

    • SHA1

      9398be29fc39ce17e01d627050958e2600b324dc

    • SHA256

      ee3bcea3ac91ee01a3c4044615a2b9f4667dec5dd54f5935ab3ea23cc1c5e4aa

    • SHA512

      84e46ae5711d0585d7e6c5114c3d28b2192fd69228a64f13080ef1b3c99bf40debcb5d82accaeaae0a77d5bae8691edda19eefd8484851ab24108f8735160da0

    • SSDEEP

      12288:1yAtZvj0KxDQsJJr+rwFoKseqaT3ChHLpSjOL1xWONh6WekeI1K5LUpzpVIK8U6+:1yAtmEBQwFHfZTy

    Score
    10/10
    discoverylummastealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks