Overview

overview

10

Static

static

3

tmp0aet_2zi.exe

windows10-ltsc_2021-x64

10

tmp0aet_2zi.exe

windows10-2004-x64

10

tmp0aet_2zi.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    tmp0aet_2zi
  • Size 1.4MB
  • Sample260601-vtbbxacy8r
  • SHA256 f2916a251cc04eeef24e506aa087e6d00a96c1e685e4ee831b62ff57e6950cf3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

  • lumma

C2

  • https://t.me/kz_prokla2

  • https://castlaby.live/naogd

  • https://oreheatq.live/gsopp

  • https://castmaxw.run/ganzde

  • https://weldorae.digital/geds

  • https://steelixr.live/aguiz

  • https://advennture.top/GKsiio

  • https://targett.top/dsANGt

  • https://smeltingt.run/giiaus

  • https://ferromny.digital/gwpd

Attributes
  • build_id

    f37c96f120e0557431c12ea9ac5f8c888827e95e3f38dba9dc

Targets

    • Target
      tmp0aet_2zi
    • Size 1.4MB
    • SHA256 f2916a251cc04eeef24e506aa087e6d00a96c1e685e4ee831b62ff57e6950cf3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoverylummastealer

    • Family: Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v16

Tasks