Overview

overview

10

Static

static

7

Installer.exe

windows7-x64

10

Installer.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Installer.exe

  • Size

    361KB

  • Sample

    250107-rt4fxavmgs

  • MD5

    34a3481203725a7a71f3d1396f3af901

  • SHA1

    f6227c6d79fe5f7ba3b6b978fd97e69fc34796f0

  • SHA256

    312fad54a43a1288c4df1aac24ee0809f30b38a2d6b9837110d3343aa8f04cdd

  • SHA512

    52458c8be4fb6c47c1899994b332fc3ec0a09705f477c0424b4850eeeacd7dccb4a869ec16b45a3bbb0f4c62947123400927bdc29e143988871d5c20354ea0af

  • SSDEEP

    6144:6BNgBIBbkWunVDgLQzDN8xj+3/0j2qSL6qLsVCaXzOxNjIfuKuu5QkpnQ:9BsQW+VaQPN8xj+P0j2qPq4VCqz2dIfI

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://fancywaxxers.shop/api

Targets

    • Target

      Installer.exe

    • Size

      361KB

    • MD5

      34a3481203725a7a71f3d1396f3af901

    • SHA1

      f6227c6d79fe5f7ba3b6b978fd97e69fc34796f0

    • SHA256

      312fad54a43a1288c4df1aac24ee0809f30b38a2d6b9837110d3343aa8f04cdd

    • SHA512

      52458c8be4fb6c47c1899994b332fc3ec0a09705f477c0424b4850eeeacd7dccb4a869ec16b45a3bbb0f4c62947123400927bdc29e143988871d5c20354ea0af

    • SSDEEP

      6144:6BNgBIBbkWunVDgLQzDN8xj+3/0j2qSL6qLsVCaXzOxNjIfuKuu5QkpnQ:9BsQW+VaQPN8xj+P0j2qPq4VCqz2dIfI

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks