Overview

overview

10

Static

static

3

bnoaprihjatuasss.exe

windows10-2004-x64

10

bnoaprihjatuasss.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    bnoaprihjatuasss.exe
  • Size 1.2MB
  • Sample260806-pn7v2ahf97
  • SHA256 473f09866ecbc5972a53c7b1d5179f5acbbe3ee9306304914558afce69690e04
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

  • lumma

C2

  • https://atirflee.world/KEnsj

  • https://esccapewz.run/ANSbwqy

  • https://travewlio.shop/ZNxbHi

  • https://touvrlane.bet/ASKwjq

  • https://sighbtseeing.shop/ASJnzh

  • https://advennture.top/GKsiio

  • https://targett.top/dsANGt

  • https://holidamyup.today/AOzkns

  • https://triplooqp.world/APowko

Attributes
  • build_id

    c23c2243b7ba3c15c98b4ebc8f550508171072bde4e5b070c8

Targets

    • Target
      bnoaprihjatuasss.exe
    • Size 1.2MB
    • SHA256 473f09866ecbc5972a53c7b1d5179f5acbbe3ee9306304914558afce69690e04
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoverylummastealer

    • Family: Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks