Overview

overview

10

Static

static

5

BB3[1].exe

windows10-2004-x64

10

BB3[1].exe

windows10-ltsc_2021-x64

10

BB3[1].exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    BB3[1].exe
  • Size 1.9MB
  • Sample250809-bbaswazzhz
  • SHA256 7639eda5fb52ec1dc17dcf1d58726f3e7b63c8a49f59faabb4ccf3f1b7f02455
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

  • lumma

C2

  • https://t.me/sadfgsdfgdfg124

  • https://smockle.top/zajr

  • https://mastwin.in/qsaz/api

  • https://ordinarniyvrach.ru/xiur/api

  • https://yamakrug.ru/lzka/api

  • https://vishneviyjazz.ru/neco/api

  • https://yrokistorii.ru/uqya/api

  • https://stolewnica.ru/xjuf/api

  • https://visokiywkaf.ru/mmtn/api

  • https://kletkamozga.ru/iwyq/api

Attributes
  • build_id

    8ab2bac5c8287fd84bc3ca69ee050470fa6929

Targets

    • Target
      BB3[1].exe
    • Size 1.9MB
    • SHA256 7639eda5fb52ec1dc17dcf1d58726f3e7b63c8a49f59faabb4ccf3f1b7f02455
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v16

Tasks