Analysis
- max time kernel
67s - max time network
22s - platform
windows7_x64 - resource
win7-20240903-en - resource tags
- submitted
31/01/2025, 17:40
General
- Target 2024-12-25/unknown-e49324f54cdf00a226d1779157391c9c260ddb6a5179ece3276f326052b95962.exe
- Size 2.5MB
- Sample250131-v87nnasmdv
- SHA256 e49324f54cdf00a226d1779157391c9c260ddb6a5179ece3276f326052b95962
Score
10/10
Malware Config
Extracted
Family
-
lumma
C2
-
https://rapeflowwj.lat/api
-
https://crosshuaht.lat/api
-
https://sustainskelet.lat/api
-
https://aspecteirs.lat/api
-
https://energyaffai.lat/api
-
https://necklacebudi.lat/api
-
https://discokeyus.lat/api
-
https://grannyejh.lat/api
-
https://movementby.cyou/api
Signatures
- Lumma Stealer, LummaC
Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
- Lumma family
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-12-25\unknown-e49324f54cdf00a226d1779157391c9c260ddb6a5179ece3276f326052b95962.exe"C:\Users\Admin\AppData\Local\Temp\2024-12-25\unknown-e49324f54cdf00a226d1779157391c9c260ddb6a5179ece3276f326052b95962.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2580-2-0x0000000000560000-0x0000000000660000-memory.dmp
memory/2580-3-0x0000000000560000-0x0000000000660000-memory.dmp
memory/2580-4-0x0000000000560000-0x0000000000660000-memory.dmp
memory/2580-5-0x0000000000410000-0x0000000000462000-memory.dmp