Overview

overview

10

Static

static

3

final_boss.exe

windows10-ltsc 2021-x64

10

Resubmissions

09/01/2025, 00:15

250109-aj54bazjg110

09/01/2025, 00:12

250109-ag6l3askbq10

Sharing

Copy URL Twitter E-mail

General

  • Target
    final_boss.bin
  • Size 1.2MB
  • Sample250109-aj54bazjg1
  • SHA256 25f3978a8bb28d7d978f5f861d639796e805230aca153ffa612dcc4d0a939edc
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

  • lumma

C2

  • https://sordid-snaked.cyou/api

  • https://awake-weaves.cyou/api

  • https://wrathful-jammy.cyou/api

  • https://debonairnukk.xyz/api

  • https://diffuculttan.xyz/api

  • https://effecterectz.xyz/api

  • https://deafeninggeh.biz/api

  • https://immureprech.biz/api

Targets

    • Target
      final_boss.bin
    • Size 1.2MB
    • SHA256 25f3978a8bb28d7d978f5f861d639796e805230aca153ffa612dcc4d0a939edc
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks