Overview

overview

10

Static

static

3

Installer.exe

windows10-2004-x64

10

Installer.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Installer.exe
  • Size 1.0MB
  • Sample260731-gzzd2aea97
  • SHA256 7e7182df2637fd7b227049670ff2e6a30ec7143c892510404acf45c914c27adb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

  • lumma

C2

  • https://vecturar.top/zsia

  • https://orjinalecza.net/lxaz

  • https://eczakozmetik.net/qop

  • https://orijinalecza.org/jub

  • https://tortoisgfe.top/paxk

  • https://eczamedikal.org/vax

  • https://orijinalecza.net/kazd

  • https://medicalbitkisel.net/juj

  • https://snakejh.top/adsk

Attributes
  • build_id

    f6dc12874efa3830fe2aae5159de5db9a6dcf2a3

Targets

    • Target
      Installer.exe
    • Size 1.0MB
    • SHA256 7e7182df2637fd7b227049670ff2e6a30ec7143c892510404acf45c914c27adb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoverylummastealer

    • Family: Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks