Overview

overview

10

Static

static

1

83108b85e5...fe.exe

windows7-x64

3

83108b85e5...fe.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    83108b85e555e80b0b3d341d30e5ada82432c9a7fbb6cebc60d790a04dfe53fe

  • Size

    518KB

  • Sample

    250124-s2jxxaxjbq

  • MD5

    f95acee2b3eae60ee067889ac4b49c12

  • SHA1

    951f5f8a497816ab37ea2626eab60f969fca8128

  • SHA256

    83108b85e555e80b0b3d341d30e5ada82432c9a7fbb6cebc60d790a04dfe53fe

  • SHA512

    3b0e18de5f8276aa553773f56f5289ecf3eb4f4b0d027a46b9f146212dc4f57bbe8ad508ea5235acad5a38dca6b7411474c8305a0a40b1a801c521e1450559ed

  • SSDEEP

    12288:LHvComcL/YMDRZ7KSaRDnfnVPjx+CWaCA00S/EO:LaoBL/DDU7/tjwA00kt

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://conformfucdioz.shop/api

https://bindceasdiwozx.shop/api

https://contemplateodszsv.shop/api

https://contemplat/api

https://arriveoxpzxo.shop/api

https://catchddkxozvp.shop/api

https://declaredczxi.shop/api

https://replacedoxcjzp.shop/api

https://applyzxcksdia.shop/api

https://extorteauhhwigw.shop/api

Targets

    • Target

      83108b85e555e80b0b3d341d30e5ada82432c9a7fbb6cebc60d790a04dfe53fe

    • Size

      518KB

    • MD5

      f95acee2b3eae60ee067889ac4b49c12

    • SHA1

      951f5f8a497816ab37ea2626eab60f969fca8128

    • SHA256

      83108b85e555e80b0b3d341d30e5ada82432c9a7fbb6cebc60d790a04dfe53fe

    • SHA512

      3b0e18de5f8276aa553773f56f5289ecf3eb4f4b0d027a46b9f146212dc4f57bbe8ad508ea5235acad5a38dca6b7411474c8305a0a40b1a801c521e1450559ed

    • SSDEEP

      12288:LHvComcL/YMDRZ7KSaRDnfnVPjx+CWaCA00S/EO:LaoBL/DDU7/tjwA00kt

    Score
    10/10
    discoverylummastealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks