Overview

overview

10

Static

static

3

file.exe

windows10-2004-x64

10

file.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    file.exe
  • Size 1.2MB
  • Sample250903-e5qyqsv1ev
  • SHA256 2f9552fb6f1ff04da4df4799337be64da7f8dfe06035d528da32233bc7b50afe
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

  • lumma

C2

  • https://t.me/quincyplayer6

  • https://starexs.bet/tskx

  • https://mastwin.in/qsaz

  • https://noggs.ru/yopd

  • https://georgej.ru/plnb

  • https://oneflof.ru/tids

  • https://epitherd.ru/zadw

  • https://backab.ru/lkdo

  • https://eigwos.ru/wqex

  • https://kimmenkiz.ru/zldw

Attributes
  • build_id

    70f08d84423d807dfc8765ae84d93c7f1489bda97ca465148e

Targets

    • Target
      file.exe
    • Size 1.2MB
    • SHA256 2f9552fb6f1ff04da4df4799337be64da7f8dfe06035d528da32233bc7b50afe
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    discoverylummastealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks