Analysis
-
max time kernel
93s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
13-01-2025 18:19
General
-
Target
Crypteddd.exe
-
Size
154KB
-
MD5
5deb5c8c278faad33b6408ea072c8068
-
SHA1
4f4ecc62573f441851a81a00c97236f103c08f2c
-
SHA256
8e5d2b4093bd4fb583ebdc07139472a75cc7ad4440d2d6b5210986a70fd75d38
-
SHA512
3374dd60d120c46bba06be1f4be71dfa5c46239114b81aa1e6e3bcc4c9f578b6f75e99c0cff4461956dd536d7349cf20ce54313232b0509c509b982d5b5a8c53
-
SSDEEP
3072:YNV66VBT+g2dzD/0b+US6XiDMcDUI+z4X8qfh4uZtxw+GwX1hy00WWmfEad:C6KQg2N/0CUSsiDMc0zhOhrZtx7Gihy2
Score
10/10
Malware Config
Extracted
Family
lumma
C2
https://showpanicke.shop/api
Signatures
-
Lumma Stealer, LummaC
Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
-
Lumma family
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Crypteddd.exe"C:\Users\Admin\AppData\Local\Temp\Crypteddd.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
376KB
-
Filesize
376KB