Analysis
-
max time kernel
100s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
11-01-2025 02:51
General
-
Target
Out.exe
-
Size
1.7MB
-
MD5
efd1bd97e7345b7a566dc49ec64aaa45
-
SHA1
4eb00e14e3a5bd88fc287617ac1ab8976bed824a
-
SHA256
d3504b5968aa8e80039c64c7d0add56ca02ccbf4866c567f7727d0996db16098
-
SHA512
ed72fb1099b2c85631e604ef206fc1a0f099d8f40c85045f8cb9392296447ebc2cb3256838c25c2929dae7ad4508d4c4973fa139291aaa050709af97bfba94f8
-
SSDEEP
24576:KhJLQReYep3pGknX2thTqPyIzmH5MO7PhPbzuGcwU/gX2r9fAG/3:tchkqP9zmH5MOdPbAnwy9YGv
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
Signatures
-
Lumma Stealer, LummaC
Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
-
Lumma family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Out.exe"C:\Users\Admin\AppData\Local\Temp\Out.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
100KB
-
Filesize
356KB
-
Filesize
356KB