Overview

overview

10

Static

static

3

WSLRT.exe

windows7-x64

10

WSLRT.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    wslrt.iso

  • Size

    12.5MB

  • Sample

    250113-jgd2gsspgy

  • MD5

    2932cff45e6fcde6ed5f232726c80e45

  • SHA1

    0f7e752a295996995866b3b20f8c3e6773691cc8

  • SHA256

    744bfe4284a9844accf0ec9ff1f56975a870a6228056430b4709c09da1a8d3c8

  • SHA512

    d2e3a95e2f27fcb023c3ed1422696415469cff22ea1f3ad99c79b0b099658a7c247cf3de6b66ac460c38f90189627d0b836996aed2fedf9f6bd5ecc4f5a6dee1

  • SSDEEP

    196608:IH2/kcOKvhKUPgOuueBA8i0L6md9OSdNmplVhBYeVmtKBcE0+:p/kcOKsUPluN8MtOSEDhgC0+

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://impend-differ.biz/api

https://print-vexer.biz/api

https://dare-curbys.biz/api

https://covery-mover.biz/api

https://formy-spill.biz/api

https://dwell-exclaim.biz/api

https://zinc-sneark.biz/api

https://se-blurry.biz/api

Targets

    • Target

      WSLRT.exe

    • Size

      12.1MB

    • MD5

      7dadbf556492f9de788752000420c6f6

    • SHA1

      1ba1474fa22d88e4bd3300a3ad1abf2a6a422fa8

    • SHA256

      f5ce9b8329c08e9c5351319073a9fac32d2e6ea7ad7d510bf5a61c9d341de7f2

    • SHA512

      100f29cfafac9e741f95dcb7cfdd10b7e7a632418b336704ba5c26289ddcf485f68dc6aa02739bb0f4ac8a3a6505ebba7436196462b0f9fc1f1e3a35c170cf36

    • SSDEEP

      196608:MH2/kcOKvhKUPgOuueBA8i0L6md9OSdNmplVhBYeVmtKBcE0+:N/kcOKsUPluN8MtOSEDhgC0+

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks