lumma | 847accb954c31422c9313aea50e04df499cd7def75355e2ffd18b52a4b28e744

General

Target
Roblox-BloxFlip-Predictor-main.zip
Size 1.8MB
Sample260820-sd9tessydy
SHA256 847accb954c31422c9313aea50e04df499cd7def75355e2ffd18b52a4b28e744
MD5 1efb2023ec095ef5a7d2add94df71c8d
SHA1 2454f7c368d4d7549e0ac68f4634af882ad1afeb
SHA512 b7eb4457cd6e39f6e0ae1ebad2f76be80bacbb6d2cb3ee2cb3e80fcd3c40919ab8551ea92c4c56af4427da1c6ba999d21501c1bed878b6c0dc5fe0754560e39a
SSDEEP 49152:Wbas3QSXFqK91oOUaSWzWtTlQ6FK0liQcux+tpB1uHLkNK7Yo:Wbas3Qc8A1oajWtTlUUcXWP
TLSH
T1CD953347A4ADCE1FAC6CDEBF5B5144C887890F7117AAA4096D08BF73DEC31A9958D0C8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

lumma

C2

https://pillowbrocccolipe.shop/api
https://communicationgenerwo.shop/api
https://diskretainvigorousiw.shop/api
https://affordcharmcropwo.shop/api
https://dismissalcylinderhostw.shop/api
https://enthusiasimtitleow.shop/api
https://worryfillvolcawoi.shop/api
https://cleartotalfisherwo.shop/api
https://sideindexfollowragelrew.pw/api

Targets

- Target
  Roblox-BloxFlip-Predictor-main/Predictor.exe
- Size 490KB
- SHA256 f5f14b9073f86da926a8ed319b3289b893442414d1511e45177f6915fb4e5478
- MD5 9c9245810bad661af3d6efec543d34fd
- SHA1 93e4f301156d120a87fe2c4be3aaa28b9dfd1a8d
- SHA512 90d9593595511e722b733a13c53d2e69a1adc9c79b3349350deead2c1cdfed615921fb503597950070e9055f6df74bb64ccd94a60d7716822aa632699c70b767
- SSDEEP 6144:3PkcFUUUQHs5TlOhDuy4VjmSO6/tU4j06xeJyCjvhsXZ4m05d0qCsfBLuWWCV/rr:3McWUUysz/NhKjJPhM4/5bV/rvgE3
- TLSH
  T11DB4CF09724740F1E27A9AF20648F93C873AD928CFF669575F714A3D97E214C0B7862E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery lumma spyware stealer trojan
- Family: Lumma Stealer, LummaC
  Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
  stealer lumma
behavioral1
- Target
  Roblox-BloxFlip-Predictor-main/mlib_image.dll
- Size 561KB
- SHA256 9fc49b3f6fd11a2b2b92748c24f21721d1011b1920d092e38af4021102125543
- MD5 5e1b7d0accb4275deab6312aa246cb3e
- SHA1 488a5cb9d9c0cf27824df32b9b76d4f67f6fb485
- SHA512 5a875dd4731e862f753ebb987593dc61d39dd3d3d13cded284de27dd09afa946fa96824ac194ec0dd45aa2ce0d56637a5522f49f28f3c89b7f5248d389b1b62e
- SSDEEP 12288:NtKMEr1LBBgPcvhwhtRtL+tKJZetu4zxLukaMevlOjPMat4+8NMutQaLqqiINw3X:NtKMEr1VBgPcvhwhtRtL+tkZezxLuQeS
- TLSH
  T111C45BC0CAEF64C5E84A1C3550627927DA24AB2D4615D7B2FBA49F03F871B03DC7A389
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  Roblox-BloxFlip-Predictor-main/updater/bdfilters.dll
- Size 4.1MB
- SHA256 9cbc29696ad2d582e251bf9c4be5cce618753fa43551d2474e1ae5cc5e1245e5
- MD5 ed730387fdcd684b756601b863c47417
- SHA1 c49ed6d0d46facf4ceaeb21f5d6bfdf9e3587fde
- SHA512 e32df727799d33922c6e92f94a7bdb0bc2772d6a6636d15e285d94d3ae4661062e5bc89ec3546b76ec853398f88d972f461327ef687f89093acf1096560d5c3f
- SSDEEP 98304:Xl4qYuQxqYfHYosUiJovT7DBmmhjSF5og3Vk9O0KChvvvveo:XuqYuQxqYfHYosUiJoviVKvvvvJ
- TLSH
  T10B167DC3E6FF52E0D4551874203FB92BA6346B0A810CE6A2F1D56F1AFC377825AA7345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  Roblox-BloxFlip-Predictor-main/updater/libcurl.dll
- Size 532KB
- SHA256 79f567797066f6206ea870ffda11cf92612aea0ee3a26582be38ddd0fd51fa53
- MD5 8da7e810e0f12b16fe6087aadda7a69c
- SHA1 e76539074da170bf52a9cc06863ff8cb498c76e6
- SHA512 7d9d40e501c9128cb81af785091aaca60b8b92af57a69f1f498bd810431e3521f9431161f8c3e4061b7e0ba2c3dfc8034e66bc4c05f5e39941623b04d367775d
- SSDEEP 6144:y6NI7/hgoJrPOkFVuW6ZoiPPnk/9AAQIPGBxTShA9ZvT6QKob6LHywHFE1P+wTt4:u/ZhPxVOdk/4IPETvzhHuzE1P+wTt4
- TLSH
  T1B9C48CA9B7B407B9E5A7C138C5538607E6B2B4651350E7CF43A48B7A2F23BE1163B710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4