lumma | b205b2786150adc187b4e621abf50db6c8008b6bb14b57c01fbf37c021e36c36 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
08-01-2025 08:41

Sharing

Report Analysis Logs

General

Target

5a810b7aed3a92eaa810dd18bcaa64dc.exe
Size

329KB
MD5

5a810b7aed3a92eaa810dd18bcaa64dc
SHA1

4d2bce13b0dee6983d5e6e011aeb24411654bc7e
SHA256

b205b2786150adc187b4e621abf50db6c8008b6bb14b57c01fbf37c021e36c36
SHA512

b4206388c6aec3d81cd1b488bfa1f0028be6e631c8d1eb8b6324fdc1a1a82d84175cae76e97186a9232938bfaea3adc323a1783058c282b18417a676ca416a22
SSDEEP

6144:ILFPg1G26tZ2ztYtjnPgG2c952DR0GC+Ar2SkE:IJPWG26H2ztYtjIJc9lZdip

Score

10^/10

lumma stealer

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Signatures

Lumma Stealer, LummaC
Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
stealer lumma
Lumma family
lumma

C:\Users\Admin\AppData\Local\Temp\5a810b7aed3a92eaa810dd18bcaa64dc.exe
"C:\Users\Admin\AppData\Local\Temp\5a810b7aed3a92eaa810dd18bcaa64dc.exe"
1⤵
PID:2432

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2432-0-0x0000000000220000-0x0000000000250000-memory.dmp

Filesize
192KB

Download
memory/2432-1-0x0000000000250000-0x00000000002A2000-memory.dmp

Filesize
328KB

Download
memory/2432-3-0x0000000000400000-0x000000000045B000-memory.dmp

Filesize
364KB

Download
memory/2432-6-0x0000000000400000-0x000000000045B000-memory.dmp

Filesize
364KB

Download
memory/2432-5-0x0000000000250000-0x00000000002A2000-memory.dmp

Filesize
328KB

Download
memory/2432-4-0x0000000000220000-0x0000000000250000-memory.dmp

Filesize
192KB

Download