Overview

overview

10

Static

static

1

0567b98365...18.exe

windows10-2004-x64

10

0567b98365...18.exe

windows11-21h2-x64

10

Resubmissions

10-01-2025 02:36

250110-c3z3hsyqcv 10

10-01-2025 02:22

250110-ctwzhaymhs 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0567b98365f8f5e5a3adf508dc7234ea7b50270a8106c3a66a0da96f38058118.zip

  • Size

    1.3MB

  • Sample

    250110-c3z3hsyqcv

  • MD5

    a0f063b82ce5a44aba075f17b9284bab

  • SHA1

    e1c46fb92ff3827347c47362511ccb0b1b09f123

  • SHA256

    0567b98365f8f5e5a3adf508dc7234ea7b50270a8106c3a66a0da96f38058118

  • SHA512

    53c13f552eba709d7a558b34c2c1ecfd35b42391b33fb882a4cb3fb3c667e4d1c4e269e7d8b3d0688bd750912307cec1612bde9c0c967615ac34f4d015ce5d29

  • SSDEEP

    24576:QxrfEXAiIKn+pSBDXQtHjoD4eS8QfuBeeTAi/ZIwoMmoz8qj7UnaBK9PIU/gsjTO:a8QGBeqvBbLQqqIiVTvsBV

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://robinsharez.shop/api

https://handscreamny.shop/api

https://chipdonkeruz.shop/api

https://versersleep.shop/api

https://crowdwarek.shop/api

https://apporholis.shop/api

https://femalsabler.shop/api

https://soundtappysk.shop/api

https://charminammoc.cyou/api

Extracted

Family

lumma

C2

https://charminammoc.cyou/api

Targets

    • Target

      0567b98365f8f5e5a3adf508dc7234ea7b50270a8106c3a66a0da96f38058118.zip

    • Size

      1.3MB

    • MD5

      a0f063b82ce5a44aba075f17b9284bab

    • SHA1

      e1c46fb92ff3827347c47362511ccb0b1b09f123

    • SHA256

      0567b98365f8f5e5a3adf508dc7234ea7b50270a8106c3a66a0da96f38058118

    • SHA512

      53c13f552eba709d7a558b34c2c1ecfd35b42391b33fb882a4cb3fb3c667e4d1c4e269e7d8b3d0688bd750912307cec1612bde9c0c967615ac34f4d015ce5d29

    • SSDEEP

      24576:QxrfEXAiIKn+pSBDXQtHjoD4eS8QfuBeeTAi/ZIwoMmoz8qj7UnaBK9PIU/gsjTO:a8QGBeqvBbLQqqIiVTvsBV

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks