Overview

overview

10

Static

static

3

WSLRT.exe

windows7-x64

10

WSLRT.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    WSLRT.exe

  • Size

    12.1MB

  • Sample

    250113-jdjgssvpcn

  • MD5

    7dadbf556492f9de788752000420c6f6

  • SHA1

    1ba1474fa22d88e4bd3300a3ad1abf2a6a422fa8

  • SHA256

    f5ce9b8329c08e9c5351319073a9fac32d2e6ea7ad7d510bf5a61c9d341de7f2

  • SHA512

    100f29cfafac9e741f95dcb7cfdd10b7e7a632418b336704ba5c26289ddcf485f68dc6aa02739bb0f4ac8a3a6505ebba7436196462b0f9fc1f1e3a35c170cf36

  • SSDEEP

    196608:MH2/kcOKvhKUPgOuueBA8i0L6md9OSdNmplVhBYeVmtKBcE0+:N/kcOKsUPluN8MtOSEDhgC0+

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://impend-differ.biz/api

https://print-vexer.biz/api

https://dare-curbys.biz/api

https://covery-mover.biz/api

https://formy-spill.biz/api

https://dwell-exclaim.biz/api

https://zinc-sneark.biz/api

https://se-blurry.biz/api

Targets

    • Target

      WSLRT.exe

    • Size

      12.1MB

    • MD5

      7dadbf556492f9de788752000420c6f6

    • SHA1

      1ba1474fa22d88e4bd3300a3ad1abf2a6a422fa8

    • SHA256

      f5ce9b8329c08e9c5351319073a9fac32d2e6ea7ad7d510bf5a61c9d341de7f2

    • SHA512

      100f29cfafac9e741f95dcb7cfdd10b7e7a632418b336704ba5c26289ddcf485f68dc6aa02739bb0f4ac8a3a6505ebba7436196462b0f9fc1f1e3a35c170cf36

    • SSDEEP

      196608:MH2/kcOKvhKUPgOuueBA8i0L6md9OSdNmplVhBYeVmtKBcE0+:N/kcOKsUPluN8MtOSEDhgC0+

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks