Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
24-01-2025 04:49
General
-
Target
mal4.exe
-
Size
71.6MB
-
MD5
0152ec7590f889d262c904817caf800d
-
SHA1
a3b75168fe3301a1e398120707b78186d2af79d2
-
SHA256
195fd67dbed4a7463a43be581de26e65d82f1e616fae01da459953a0e1997652
-
SHA512
05f04b9bc6602e0fdefb67e78bc614634959a6345837308cc43554f5cedc99696ee6a437d8c46da91924966a00b2850caccc534f6aea855d74884a3573da805f
-
SSDEEP
24576:ltdAm9DU//CR3wCkCiRgoG7hBaHkbEXXeG/jFt5xTx9Ch+2tl1WpN+r:LqTjtRFk6ek1X8tzVr
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
https://hurtyfallyer.click/api
Signatures
-
Lumma Stealer, LummaC
Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
-
Lumma family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\mal4.exe"C:\Users\Admin\AppData\Local\Temp\mal4.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
1.5MB