Analysis
-
max time kernel
67s -
max time network
22s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
31-01-2025 17:40
General
-
Target
2024-12-25/unknown-e49324f54cdf00a226d1779157391c9c260ddb6a5179ece3276f326052b95962.exe
-
Size
2.5MB
-
MD5
592dfc2c69751ac75147467449ed271e
-
SHA1
16df4b6679091b52db2baed0e535b22f418fed5c
-
SHA256
e49324f54cdf00a226d1779157391c9c260ddb6a5179ece3276f326052b95962
-
SHA512
f0bd781a7ba5d6f43593d0ca67daa7196207960589b7ed7c22df0f2325035b7e4527963dfe4e0111ede7b8be48e7fba30a2a4be1ac8f07d9cc432bdbc34bd773
-
SSDEEP
49152:dFUjNrQNRdtz/izuOBU0+djAeSlj2taFwuJxWvIT6tXdsQtEr8haJ:KN4vz/izuOBadjAeSlj2taSubWAT6tXY
Malware Config
Extracted
lumma
https://rapeflowwj.lat/api
https://crosshuaht.lat/api
https://sustainskelet.lat/api
https://aspecteirs.lat/api
https://energyaffai.lat/api
https://necklacebudi.lat/api
https://discokeyus.lat/api
https://grannyejh.lat/api
https://movementby.cyou/api
Signatures
-
Lumma Stealer, LummaC
Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
-
Lumma family
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-12-25\unknown-e49324f54cdf00a226d1779157391c9c260ddb6a5179ece3276f326052b95962.exe"C:\Users\Admin\AppData\Local\Temp\2024-12-25\unknown-e49324f54cdf00a226d1779157391c9c260ddb6a5179ece3276f326052b95962.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
328KB