Overview

overview

10

Static

static

5

a42f37df47...a1.exe

windows10-2004-x64

10

a42f37df47...a1.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    a42f37df47fdbb173c7495e18128b693b087e9a3a9a2707ad7cdf18e8c2649a1.exe
  • Size 2.4MB
  • Sample260703-c37glaat4z
  • SHA256 a42f37df47fdbb173c7495e18128b693b087e9a3a9a2707ad7cdf18e8c2649a1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
lummadiscoverystealerupx

Malware Config

Extracted

Family

  • lumma

C2

  • https://t.me/vhutdfghytrd

  • https://facilin.qpon/asdk

  • https://tetrwoo.asia/niuo

  • https://figueqhk.xin/qyvv

  • https://hffiahz.asia/pppm

  • https://plataukz.xin/nbvg

  • https://sprimvd.my/zcbh

  • https://renohhde.xin/nvhu

  • https://lithfzx.my/bvcg

  • https://titlexy.my/bavg

Attributes
  • build_id

    18e4748491dd4d4ea848146b1c475174205a306dfe

Targets

    • Target
      a42f37df47fdbb173c7495e18128b693b087e9a3a9a2707ad7cdf18e8c2649a1.exe
    • Size 2.4MB
    • SHA256 a42f37df47fdbb173c7495e18128b693b087e9a3a9a2707ad7cdf18e8c2649a1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoverylummastealerupx

    • Family: Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks