Overview

overview

10

Static

static

1

cedea9aa30...71.exe

windows7-x64

10

cedea9aa30...71.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b0bafdddbc54bcbc57b87dfb94d0c64.bin

  • Size

    1.8MB

  • Sample

    250108-bl1r2sxmgs

  • MD5

    2958334cf3374e6a12229fe1714a10ef

  • SHA1

    82060200e5747c37c26a8e13844c9b42904b395d

  • SHA256

    e1ab681fe912ac1f36418e8f809626579173513408a35a97a9f02442eddbcfd0

  • SHA512

    eabb2fd762b9f4213ba65555a7a0158e0964f14c4aba14f0ef2ae4659b26aedfd39bf83b1a5389039a7fb2b9fdaba48195851a3f43fbda9d723a24c0f9ff9e86

  • SSDEEP

    49152:ysxsJ91bzy3kuLk1CYGibm5fXqMV7igBMfjl:ysx6v+3rL8Jahac7FMbl

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://glowscarrytsv.sbs/api

Targets

    • Target

      cedea9aa30ea6ae6d36937321225d8ad2d8e2ff21412ef2254817b0da028ed71.exe

    • Size

      73.7MB

    • MD5

      5b0bafdddbc54bcbc57b87dfb94d0c64

    • SHA1

      80f9e34f49784e7d097ea9cdf3989133a688c726

    • SHA256

      cedea9aa30ea6ae6d36937321225d8ad2d8e2ff21412ef2254817b0da028ed71

    • SHA512

      31904c1b0f616fb1fccd5d293eb5df41a03db998cfe29d34ef88fedd175d6fcaf5d6b4b30219d0c8c8b96b4a2b3c7a9da95ad023a52eaaec2f0209c77ffcc9d9

    • SSDEEP

      49152:YLJwSihjgb6GLb4SKEs3DyOMC2DlUt0+yO3A32ASNTv0k7Ox1jWV9D:0wSiab67zeCzt0+yO3kSeuOr45

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks