Analysis
-
max time kernel
122s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
08-01-2025 10:12
General
-
Target
lumma.exe
-
Size
5.6MB
-
MD5
5bffec5b786b54b8fe06990047bc093d
-
SHA1
d00b98ed1046b04e04b90fc79f3dc97d9b92acf2
-
SHA256
25b251a6b74d9d65060cbcf1fcb404252f0146f884039346960c28c369062a2e
-
SHA512
cee97c2cdce26b505b56e556d8c608e77a2968ba0b843783f84bfc61ee37985b9d4232db4e429a13f7bd3ee1e5057ec80cd95d19323fd3bae5e7db37be049d8a
-
SSDEEP
98304:5Pe9jGF9Chib7+AIzsy+uEAN7mbE+EDEBD8WIq0rgyq5oxEywlmjsGLT2HZTpUAT:Al4+AWwcFmA+E4Jfyqf/mA4T2HBT
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\lumma.exe"C:\Users\Admin\AppData\Local\Temp\lumma.exe"1⤵
- System Location Discovery: System Language Discovery
-
C:\Users\Admin\AppData\Local\Temp\7zS8E7DD3C6\Setup.exe"C:\Users\Admin\AppData\Local\Temp\7zS8E7DD3C6\Setup.exe"2⤵
- Executes dropped EXE
-