Overview

overview

10

Static

static

3

Wave.exe

windows10-2004-x64

10

Wave.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Wave.exe

  • Size

    551KB

  • Sample

    250120-adzpcasjbz

  • MD5

    3892943a6de6d0598f89d14446adbaf8

  • SHA1

    0ebfd2837ab7d07c5dea6a2836f54e3b6572c84d

  • SHA256

    482b63ab5f666669c1e16f0b7b8ac55a3a4f83eb579a5882708caf3cd8d92be5

  • SHA512

    4cb93272bf2f951d7d47fd90f6ac4feaadb15684d6101fcd0533231ff22a64eaf439c1716160a969d2a9a2825fa6d32689675a7c014fe84192f552b6826f3f11

  • SSDEEP

    12288:GQQjhinbT5WxNGBiMyvlWYMMSRuNMbnENB9YFASS:GQQjhinbTCNGaWYCnENB9YBS

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://truculengisau.biz/api

https://spookycappy.biz/api

https://punishzement.biz/api

https://nuttyshop/api

https://nuttyshopr.biz/api

https://marketlumpe.biz/api

https://littlenotii.biz/api

https://grandiouseziu.biz/api

https://fraggielek.biz/api

Targets

    • Target

      Wave.exe

    • Size

      551KB

    • MD5

      3892943a6de6d0598f89d14446adbaf8

    • SHA1

      0ebfd2837ab7d07c5dea6a2836f54e3b6572c84d

    • SHA256

      482b63ab5f666669c1e16f0b7b8ac55a3a4f83eb579a5882708caf3cd8d92be5

    • SHA512

      4cb93272bf2f951d7d47fd90f6ac4feaadb15684d6101fcd0533231ff22a64eaf439c1716160a969d2a9a2825fa6d32689675a7c014fe84192f552b6826f3f11

    • SSDEEP

      12288:GQQjhinbT5WxNGBiMyvlWYMMSRuNMbnENB9YFASS:GQQjhinbTCNGaWYCnENB9YBS

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks