Overview

overview

10

Static

static

3

setup.exe

windows10-2004-x64

10

setup.exe

windows10-ltsc_2021-x64

10

setup.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    setup.exe
  • Size 1.1MB
  • Sample250905-v3kxpstxay
  • SHA256 f57829fccab2aa91f23ab2a8779fc7aa93bf5eabd1010bb3479580989f6bce45
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

  • lumma

C2

  • https://t.me/bdfgjdf5

  • https://setbnhy.bet/wpqe

  • https://mastwin.in/qsaz

  • https://noggs.ru/yopd

  • https://georgej.ru/plnb

  • https://oneflof.ru/tids

  • https://epitherd.ru/zadw

  • https://backab.ru/lkdo

  • https://eigwos.ru/wqex

  • https://kimmenkiz.ru/zldw

Attributes
  • build_id

    5d61b25a82448c267b904486616f3dbb464dfbde

Targets

    • Target
      setup.exe
    • Size 1.1MB
    • SHA256 f57829fccab2aa91f23ab2a8779fc7aa93bf5eabd1010bb3479580989f6bce45
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    discoverylummastealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates processes with tasklist

      discovery
    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v16

Tasks