Overview

overview

10

Static

static

5

51f10ba0c6...1d.exe

windows10-2004-x64

10

51f10ba0c6...1d.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    51f10ba0c6bdf7f47db635fb0c74be0ab9d9c41e552a7bf085419fe312423c1d.exe
  • Size 2.4MB
  • Sample260703-c16saaas91
  • SHA256 51f10ba0c6bdf7f47db635fb0c74be0ab9d9c41e552a7bf085419fe312423c1d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
lummadiscoverystealerupx

Malware Config

Extracted

Family

  • lumma

C2

  • https://t.me/famkfmkaij1312

  • https://excesso.qpon/xsaw

  • https://diadtuky.su/texz

  • https://sirhirssg.su/xzde

  • https://prebwle.su/xazd

  • https://rhussois.su/tatr

  • https://todoexy.su/xqts

  • https://acrislegt.su/tazd

  • https://averiryvx.su/zadr

  • https://cerasatvf.su/qtpd

Attributes
  • build_id

    18157a600ce55197ab71bff1cd97bc84492b5944f987ef8c

Targets

    • Target
      51f10ba0c6bdf7f47db635fb0c74be0ab9d9c41e552a7bf085419fe312423c1d.exe
    • Size 2.4MB
    • SHA256 51f10ba0c6bdf7f47db635fb0c74be0ab9d9c41e552a7bf085419fe312423c1d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoverylummastealerupx

    • Family: Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks