Overview

overview

10

Static

static

5

Application.exe

windows10-2004-x64

10

Application.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Application.exe
  • Size 1001.1MB
  • Sample260802-1jet8ssdna
  • SHA256 3438eb498ae03d4a380eb445797ab5f78b521d598422f450ede8dbe9c471ec0a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
lummadefense_evasiondiscoveryexecutionspywarestealertrojan

Malware Config

Extracted

Family

  • lumma

C2

  • https://p3ar11fter.sbs/api

  • https://3xp3cts1aim.sbs/api

  • https://owner-vacat10n.sbs/api

  • https://peepburry828.sbs/api

  • https://p10tgrace.sbs/api

  • https://befall-sm0ker.sbs/api

  • https://librari-night.sbs/api

  • https://processhol.sbs/api

  • https://milk-of-horned.cyou/api

Targets

    • Target
      Application.exe
    • Size 1001.1MB
    • SHA256 3438eb498ae03d4a380eb445797ab5f78b521d598422f450ede8dbe9c471ec0a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    defense_evasiondiscoveryexecutionlummaspywarestealertrojan

    • Family: Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Discovers running processes

      Running process information can be used to identify security tools or plan follow-on actions.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks