Overview

overview

10

Static

static

3

Lunar_Clie....0.exe

windows7-x64

10

Lunar_Clie....0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Lunar_Client_Qt_Setup_v2.5.0.exe

  • Size

    522KB

  • Sample

    250107-ky6y9stpbz

  • MD5

    e60e10014654b738717e6a79e8eaa398

  • SHA1

    cb3e0a2bbb445bf3884505c2628abe62472cffdb

  • SHA256

    238711a7d4a9df38868d38451308149ce999ca15f7fd2fd7a7876baeab925afd

  • SHA512

    679af80c150b7d1061eed6d54bfeb835b22d6a01405f4a8528d8d5ad40c2c3597ff44ff1730720a83399b067e9151b2e5180fb629b7e4a91cb54f8976417d585

  • SSDEEP

    12288:/1/yfnFlaiTgSBw5PoRtF4oziaIWtMC5:/Qfa2OWRrDzf6C5

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://scriptyprefej.store/api

https://navygenerayk.store/api

https://founpiuer.store/api

https://necklacedmny.store/api

https://thumbystriw.store/api

https://fadehairucw.store/api

https://crisiwarny.store/api

https://presticitpo.store/api

https://parachutedisky.cyou/api

Targets

    • Target

      Lunar_Client_Qt_Setup_v2.5.0.exe

    • Size

      522KB

    • MD5

      e60e10014654b738717e6a79e8eaa398

    • SHA1

      cb3e0a2bbb445bf3884505c2628abe62472cffdb

    • SHA256

      238711a7d4a9df38868d38451308149ce999ca15f7fd2fd7a7876baeab925afd

    • SHA512

      679af80c150b7d1061eed6d54bfeb835b22d6a01405f4a8528d8d5ad40c2c3597ff44ff1730720a83399b067e9151b2e5180fb629b7e4a91cb54f8976417d585

    • SSDEEP

      12288:/1/yfnFlaiTgSBw5PoRtF4oziaIWtMC5:/Qfa2OWRrDzf6C5

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks