Overview

overview

10

Static

static

3

b3370fc9e6...63.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b3370fc9e6050ac646424110a4efa3d98ddf62a0e0e8f4ae31203dec65d7f963

  • Size

    1.1MB

  • Sample

    250410-t5162axjw4

  • MD5

    c6945ad97b53b29921e841e2e8d31a42

  • SHA1

    d5aebc0bdf58f652813fb489a0f842cc6b092306

  • SHA256

    b3370fc9e6050ac646424110a4efa3d98ddf62a0e0e8f4ae31203dec65d7f963

  • SHA512

    cf02bd0d2b4db5a7adf9f207984148d9fc031d6e05f8ee65f2f02aa46818333c81cdc64cb3533fb7efb640413b77ee17302823de25e4245e5cade11b76bc5e69

  • SSDEEP

    24576:kBTI7dCDKN3WT2iqSbysfw6MvJXMKwcbEPTlCXNXo7aL6UpN9Cix4iou5Wc:

Score
10/10
lummadiscoveryspywarestealer

Malware Config

Extracted

Family

lumma

C2

https://dynamiczl.live/tgre

https://soursopsf.run/gsoiao

https://changeaie.top/geps

https://easyupgw.live/eosz

https://liftally.top/xasj

https://upmodini.digital/gokk

https://salaccgfa.top/gsooz

https://zestmodp.top/zeda

https://xcelmodo.run/nahd

Targets

    • Target

      b3370fc9e6050ac646424110a4efa3d98ddf62a0e0e8f4ae31203dec65d7f963

    • Size

      1.1MB

    • MD5

      c6945ad97b53b29921e841e2e8d31a42

    • SHA1

      d5aebc0bdf58f652813fb489a0f842cc6b092306

    • SHA256

      b3370fc9e6050ac646424110a4efa3d98ddf62a0e0e8f4ae31203dec65d7f963

    • SHA512

      cf02bd0d2b4db5a7adf9f207984148d9fc031d6e05f8ee65f2f02aa46818333c81cdc64cb3533fb7efb640413b77ee17302823de25e4245e5cade11b76bc5e69

    • SSDEEP

      24576:kBTI7dCDKN3WT2iqSbysfw6MvJXMKwcbEPTlCXNXo7aL6UpN9Cix4iou5Wc:

    Score
    10/10
    lummadiscoveryspywarestealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks