Overview

overview

10

Static

static

1

setup.exe

windows7-x64

10

setup.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    setup.exe

  • Size

    566KB

  • Sample

    250227-mt19bsvrv7

  • MD5

    74348bd0fc2e2dacbd6ffb85bd450c6a

  • SHA1

    37c40c599d9636c0aadc5bb6386e28134c62446a

  • SHA256

    c897d695c82d8124d86f3df54ed49d8625fe0d6f843480f911d775f98ee64afb

  • SHA512

    8c03552e696aa99dc6c5bb7cea55c408cf0d7e1dc3376dd1f7bb3c53858226b58f5c7382f1455de1da6f99a118809eb536c92183e637259ee758276d0b1bd29c

  • SSDEEP

    12288:sTVVL28x3S9EYn+2ZiHpaGyJ3HUXlBVwr196xLhrDmIg6n364fgETEO:sTv68xwn+2ZiHIBNwBVwrDIOhmt

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://drawwyobstacw.sbs/api

https://condifendteu.sbs/api

https://ehticsprocw.sbs/api

https://vennurviot.sbs/api

https://resinedyw.sbs/api

https://enlargkiw.sbs/api

https://allocatinow.sbs/api

https://mathcucom.sbs/api

https://explorationmsn.store/api

Targets

    • Target

      setup.exe

    • Size

      566KB

    • MD5

      74348bd0fc2e2dacbd6ffb85bd450c6a

    • SHA1

      37c40c599d9636c0aadc5bb6386e28134c62446a

    • SHA256

      c897d695c82d8124d86f3df54ed49d8625fe0d6f843480f911d775f98ee64afb

    • SHA512

      8c03552e696aa99dc6c5bb7cea55c408cf0d7e1dc3376dd1f7bb3c53858226b58f5c7382f1455de1da6f99a118809eb536c92183e637259ee758276d0b1bd29c

    • SSDEEP

      12288:sTVVL28x3S9EYn+2ZiHpaGyJ3HUXlBVwr196xLhrDmIg6n364fgETEO:sTv68xwn+2ZiHIBNwBVwrDIOhmt

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks