Overview

overview

10

Static

static

3

TZProject.exe

windows7-x64

7

TZProject.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    TZProject.exe

  • Size

    686KB

  • Sample

    250113-tt51va1jgq

  • MD5

    b6ffc5ab3d9c3d132b0cdb490ed800d2

  • SHA1

    69f55a57d6353649c3f709163bb7d440a3a7eb7f

  • SHA256

    138671f56898c4504a02588c6f9c4de6a3961ce015bb147d579bd54bc454ded1

  • SHA512

    4163a1537f80ef49a9ec9dd17b7bfb442be57afb24519d753ee2e2ba99c443e555b69570218aa1ee3a0e7b6419eb2432089d69f8c9f5771ada0115f2965f0f5d

  • SSDEEP

    12288:rlGQs6nEzMMU1wYwFozDOVhRGHdhdBBmCU0SmegE0wgoNkTzD5NryZI5L36lo+Qv:MEEIDU+acZBxST0bbzD5Nre

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://impend-differ.biz/api

https://print-vexer.biz/api

https://dare-curbys.biz/api

https://covery-mover.biz/api

https://formy-spill.biz/api

https://dwell-exclaim.biz/api

https://zinc-sneark.biz/api

https://se-blurry.biz/api

Targets

    • Target

      TZProject.exe

    • Size

      686KB

    • MD5

      b6ffc5ab3d9c3d132b0cdb490ed800d2

    • SHA1

      69f55a57d6353649c3f709163bb7d440a3a7eb7f

    • SHA256

      138671f56898c4504a02588c6f9c4de6a3961ce015bb147d579bd54bc454ded1

    • SHA512

      4163a1537f80ef49a9ec9dd17b7bfb442be57afb24519d753ee2e2ba99c443e555b69570218aa1ee3a0e7b6419eb2432089d69f8c9f5771ada0115f2965f0f5d

    • SSDEEP

      12288:rlGQs6nEzMMU1wYwFozDOVhRGHdhdBBmCU0SmegE0wgoNkTzD5NryZI5L36lo+Qv:MEEIDU+acZBxST0bbzD5Nre

    Score
    10/10
    discoverylummastealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks