Overview

overview

10

Static

static

1

Aura.exe

windows10-2004-x64

10

Aura.exe

windows10-ltsc 2021-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Aura.exe

  • Size

    353KB

  • Sample

    250110-sspf2ayjd1

  • MD5

    069c7b1efa0f08aebb8f8e48acf385b5

  • SHA1

    f1c9e63e8d4c8038e66ac56d6edd3a82a97247e6

  • SHA256

    c81f67856d1dc86fa6e487194fdff577080a5c4a3f41a90492082dee2b3f049c

  • SHA512

    4c634f0a621a855133bba74bd06dd5964361d694f862f79097b68a26c0713fb813d6ab14c14a1534345521926d5e18c700c18d9f4c1433102c7569d420a933eb

  • SSDEEP

    6144:9VQro8w6aEpWOpkyvyKLTZDZPY7mE6BH5EG4qhtv4D8fmrXF1ABVs0anJN0jKkf/:3QcsbW6XZD+7mEAeG3hVZfmrXF1iY0++

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://robinsharez.shop/api

https://handscreamny.shop/api

https://chipdonkeruz.shop/api

https://versersleep.shop/api

https://crowdwarek.shop/api

https://apporholis.shop/api

https://femalsabler.shop/api

https://soundtappysk.shop/api

https://letterdrive.shop/api

Targets

    • Target

      Aura.exe

    • Size

      353KB

    • MD5

      069c7b1efa0f08aebb8f8e48acf385b5

    • SHA1

      f1c9e63e8d4c8038e66ac56d6edd3a82a97247e6

    • SHA256

      c81f67856d1dc86fa6e487194fdff577080a5c4a3f41a90492082dee2b3f049c

    • SHA512

      4c634f0a621a855133bba74bd06dd5964361d694f862f79097b68a26c0713fb813d6ab14c14a1534345521926d5e18c700c18d9f4c1433102c7569d420a933eb

    • SSDEEP

      6144:9VQro8w6aEpWOpkyvyKLTZDZPY7mE6BH5EG4qhtv4D8fmrXF1ABVs0anJN0jKkf/:3QcsbW6XZD+7mEAeG3hVZfmrXF1iY0++

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks