Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
07-01-2025 01:07
General
-
Target
0f17388ac1220dcb7bcb2889e16bb21fae876045a55079a572057c75fa2d2067.exe
-
Size
71.6MB
-
MD5
2fbed9c7f4e671459ba52391d1d2975d
-
SHA1
89e3ebc3fb946566a77bb1359d0f43eded9ff3a2
-
SHA256
0f17388ac1220dcb7bcb2889e16bb21fae876045a55079a572057c75fa2d2067
-
SHA512
ddbc924f47f8ae7d6c27026c293b94cd1640f32a82c8cc9561693e6f5cee490c695f29db307c2d1b68d72651e40f8bbfe6e4149009a8fe387bcfd6d4edf29bf1
-
SSDEEP
24576:bnbbPIm7K4brDi4IxgRqzwqNb+Yz73P2EMZbG0JEtdqxytD7TriBH0T0OgxLDQX:THBKh4nqzF3PYdStoari+gJQ
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
https://displayclubby.sbs/api
Signatures
-
Lumma Stealer, LummaC
Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
-
Lumma family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0f17388ac1220dcb7bcb2889e16bb21fae876045a55079a572057c75fa2d2067.exe"C:\Users\Admin\AppData\Local\Temp\0f17388ac1220dcb7bcb2889e16bb21fae876045a55079a572057c75fa2d2067.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
348KB
-
Filesize
348KB
-
Filesize
1.5MB