Overview

overview

10

Static

static

1

malware.exe

windows7-x64

3

malware.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    malware.exe

  • Size

    7.2MB

  • Sample

    250225-rf53ksypz4

  • MD5

    d165b333fe9244a43967bc69c0b686cc

  • SHA1

    58fbba484bdeeb020cc69a78218c897d28f7e2f2

  • SHA256

    01a2bb9f7591986b6eb3388699e7ce4a52b2686295b48dae0ec001639ba9f9b4

  • SHA512

    616556797aaad5deb2d5e8e8a70427d4e0b9ca4f64dd5976cdeaa3c6d8a37a612011e89b120a6ef2e1ef8a50d70483a71d8289a09952f612a9023d5f2922b580

  • SSDEEP

    98304:sFMd0y7xmvwcd7c98l9jhbBcORNfIM/Ky:sFMd0yxOwcx3jhbBZRFIot

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://associationokeo.shop/api

https://turkeyunlikelyofw.shop/api

https://detectordiscusser.shop/api

https://technologyenterdo.shop/api

https://fieldtrollyeowskwe.shop/api

Targets

    • Target

      malware.exe

    • Size

      7.2MB

    • MD5

      d165b333fe9244a43967bc69c0b686cc

    • SHA1

      58fbba484bdeeb020cc69a78218c897d28f7e2f2

    • SHA256

      01a2bb9f7591986b6eb3388699e7ce4a52b2686295b48dae0ec001639ba9f9b4

    • SHA512

      616556797aaad5deb2d5e8e8a70427d4e0b9ca4f64dd5976cdeaa3c6d8a37a612011e89b120a6ef2e1ef8a50d70483a71d8289a09952f612a9023d5f2922b580

    • SSDEEP

      98304:sFMd0y7xmvwcd7c98l9jhbBcORNfIM/Ky:sFMd0yxOwcx3jhbBZRFIot

    Score
    10/10
    discoverylummastealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks