Overview

overview

10

Static

static

1

𝐒𝐞�...��.exe

windows7-x64

10

𝐒𝐞�...��.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    𝐒𝐞𝐭𝐮𝐩.exe

  • Size

    11.7MB

  • Sample

    250124-rfzksssjbs

  • MD5

    738e599d9b27830cb7920e3cfdeabd43

  • SHA1

    a6f7881df9c273d8e4444fb3d242c0a8b3b00965

  • SHA256

    ffcba56c943bd2e56ccc64c5c7b2b8d30d6068ef97a2c7245b54a3281bd75d48

  • SHA512

    60d5fd6f36a1ad60c49401425f89e36b87db5afcd968931eb4bf19bd5d6216564282ffb6ee9dd1315d09ef7fb953748f3b0949090c31dae1daf1a140bcdffd23

  • SSDEEP

    196608:oZdc01IU22ea1ulaUHXrVua+k/P5GEVbkagWQyz0WHu+ZQINV45Wpy:UT/mHaUBzdP5/kagWSWLd4

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://rapeflowwj.lat/api

https://crosshuaht.lat/api

https://sustainskelet.lat/api

https://aspecteirs.lat/api

https://energyaffai.lat/api

https://necklacebudi.lat/api

https://discokeyus.lat/api

https://grannyejh.lat/api

https://recessiowirs.click/api

Targets

    • Target

      𝐒𝐞𝐭𝐮𝐩.exe

    • Size

      11.7MB

    • MD5

      738e599d9b27830cb7920e3cfdeabd43

    • SHA1

      a6f7881df9c273d8e4444fb3d242c0a8b3b00965

    • SHA256

      ffcba56c943bd2e56ccc64c5c7b2b8d30d6068ef97a2c7245b54a3281bd75d48

    • SHA512

      60d5fd6f36a1ad60c49401425f89e36b87db5afcd968931eb4bf19bd5d6216564282ffb6ee9dd1315d09ef7fb953748f3b0949090c31dae1daf1a140bcdffd23

    • SSDEEP

      196608:oZdc01IU22ea1ulaUHXrVua+k/P5GEVbkagWQyz0WHu+ZQINV45Wpy:UT/mHaUBzdP5/kagWSWLd4

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates processes with tasklist

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks