Overview

overview

10

Static

static

1

fd6bd9a376...66.exe

windows7-x64

5

fd6bd9a376...66.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd6bd9a37677899ab77945288508f6946c0ec955b7cdc2bc106a0b6d5de67c66.exe

  • Size

    404KB

  • Sample

    250123-e28dlstlbl

  • MD5

    c9c7d2de539b4b1c93776286a9d064da

  • SHA1

    2c40996830841153ecd76c1fba2d64e39c7321e9

  • SHA256

    fd6bd9a37677899ab77945288508f6946c0ec955b7cdc2bc106a0b6d5de67c66

  • SHA512

    6c1c6536c62a9dd4c5bd4074a27e3cf45a58acbd92b4cd466c30ab95d15b404970c123a993243623d2280f4a711fe64cf33af7e53cdb501ff95073f7e22c617a

  • SSDEEP

    12288:oQXNUkhvrUrv9ysegjTkH9O+OYJ0Lr8zspre4J:o5khwrvpeaTkdjOxr8zIrRJ

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://impolitewearr.biz/api

https://toppyneedus.biz/api

https://lightdeerysua.biz/api

https://suggestyuoz.biz/api

https://hoursuhouy.biz/api

https://mixedrecipew.biz/api

https://affordtempyo.biz/api

https://pleasedcfrown.biz/api

Targets

    • Target

      fd6bd9a37677899ab77945288508f6946c0ec955b7cdc2bc106a0b6d5de67c66.exe

    • Size

      404KB

    • MD5

      c9c7d2de539b4b1c93776286a9d064da

    • SHA1

      2c40996830841153ecd76c1fba2d64e39c7321e9

    • SHA256

      fd6bd9a37677899ab77945288508f6946c0ec955b7cdc2bc106a0b6d5de67c66

    • SHA512

      6c1c6536c62a9dd4c5bd4074a27e3cf45a58acbd92b4cd466c30ab95d15b404970c123a993243623d2280f4a711fe64cf33af7e53cdb501ff95073f7e22c617a

    • SSDEEP

      12288:oQXNUkhvrUrv9ysegjTkH9O+OYJ0Lr8zspre4J:o5khwrvpeaTkdjOxr8zIrRJ

    Score
    10/10
    discoverylummastealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks