Overview

overview

10

Static

static

1

Roblox Executor.zip

windows7-x64

10

Roblox Executor.zip

windows10-2004-x64

1

Resubmissions

23-01-2025 01:02

250123-bd52ssvjbz 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Roblox Executor.zip

  • Size

    16.5MB

  • Sample

    250123-bd52ssvjbz

  • MD5

    0121ef0d742f203a0f8f59626bc62bec

  • SHA1

    0ab9b524366725a4a0ef2c7e1ee2384dbdb263c7

  • SHA256

    5a3ffafc876896831f7794e2fc258861e9de6fac51313f35cd5db4bf6914ee9e

  • SHA512

    23131c21657b8738c91ea4960f7b2a3dfe2c5a2d2629ecd2c1491eaaf18f6cf0b8bf5fca2e9fc606b8dc4e0fde3b8f0fd7d6b42eafd360f252444ff121cdf6be

  • SSDEEP

    393216:tP4rI4//JU7Z7XbwKBOxBOpGrsWQafuuim5c2JpoI94:u/JMZ70OMBdsWBfEKc2bza

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://impolitewearr.biz/api

https://toppyneedus.biz/api

https://lightdeerysua.biz/api

https://suggestyuoz.biz/api

https://hoursuhouy.biz/api

https://mixedrecipew.biz/api

https://affordtempyo.biz/api

https://pleasedcfrown.biz/api

Targets

    • Target

      Roblox Executor.zip

    • Size

      16.5MB

    • MD5

      0121ef0d742f203a0f8f59626bc62bec

    • SHA1

      0ab9b524366725a4a0ef2c7e1ee2384dbdb263c7

    • SHA256

      5a3ffafc876896831f7794e2fc258861e9de6fac51313f35cd5db4bf6914ee9e

    • SHA512

      23131c21657b8738c91ea4960f7b2a3dfe2c5a2d2629ecd2c1491eaaf18f6cf0b8bf5fca2e9fc606b8dc4e0fde3b8f0fd7d6b42eafd360f252444ff121cdf6be

    • SSDEEP

      393216:tP4rI4//JU7Z7XbwKBOxBOpGrsWQafuuim5c2JpoI94:u/JMZ70OMBdsWBfEKc2bza

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks