Overview

overview

10

Static

static

5

41b89f483f...b8.exe

windows10-2004-x64

10

41b89f483f...b8.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    41b89f483fdfe5e08f69045b52685a008b4fcb042569b752f686770fbea162b8.exe
  • Size 4.8MB
  • Sample260703-c31daaat4v
  • SHA256 41b89f483fdfe5e08f69045b52685a008b4fcb042569b752f686770fbea162b8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
lummadiscoverystealerupx

Malware Config

Extracted

Family

  • lumma

C2

  • https://t.me/vhutdfghytrd

  • https://facilin.qpon/asdk

  • https://diadtuky.su/texz

  • https://sirhirssg.su/xzde

  • https://prebwle.su/xazd

  • https://rhussois.su/tatr

  • https://todoexy.su/xqts

  • https://acrislegt.su/tazd

  • https://averiryvx.su/zadr

  • https://cerasatvf.su/qtpd

Attributes
  • build_id

    4b31925a183bd39b940e3ee37791e4b877ab7bfbf7

Targets

    • Target
      41b89f483fdfe5e08f69045b52685a008b4fcb042569b752f686770fbea162b8.exe
    • Size 4.8MB
    • SHA256 41b89f483fdfe5e08f69045b52685a008b4fcb042569b752f686770fbea162b8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoverylummastealerupx

    • Family: Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks