lumma | 6dee024620c430be8dd3616a0b5ceaeeb8069d8ab74968dfc12b9198796dd03e

Sharing

Copy URL Twitter E-mail

General

Target
EVD-MPBA.zip
Size 16.1MB
Sample261024-bbqt4a1yaw
SHA256 6dee024620c430be8dd3616a0b5ceaeeb8069d8ab74968dfc12b9198796dd03e
MD5 18d26207420283ffdcc50ffb18606bc0
SHA1 02ec079f9bd31692f3de2d7bea52d43b2cc3562e
SHA512 d34f06a5fdf49be40f09e4b59d4e70e47b5a43a0852d10459c46560aaa440062827250d7580625498e7b6be9929df5472c9533497e9beadd4db5d63493196cc6
SSDEEP 393216:BSwHk1HtoxPUCiyEDI5y1JzW82xYIbUmmlMTX9ssvqnCmBAC:BSwHkxto+ySXjcYwX9NyCw
TLSH
T1DF073329D6BEC6D499F3B3E5FD7996E364CC654D0113E27E882400C3AAE073B35A416B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

lumma

https://roomabolishsnifftwk.shop/api
https://civilianurinedtsraov.shop/api
https://stalfbaclcalorieeis.shop/api
https://employhabragaomlsp.shop/api
https://femininiespywageg.shop/api
https://averageaattractiionsl.shop/api
https://buttockdecarderwiso.shop/api
https://museumtespaceorsp.shop/api
https://makketakecoincidejs.shop/api

Targets

- Target
  EVD-MPBA.zip
- Size 16.1MB
- SHA256 6dee024620c430be8dd3616a0b5ceaeeb8069d8ab74968dfc12b9198796dd03e
- MD5 18d26207420283ffdcc50ffb18606bc0
- SHA1 02ec079f9bd31692f3de2d7bea52d43b2cc3562e
- SHA512 d34f06a5fdf49be40f09e4b59d4e70e47b5a43a0852d10459c46560aaa440062827250d7580625498e7b6be9929df5472c9533497e9beadd4db5d63493196cc6
- SSDEEP 393216:BSwHk1HtoxPUCiyEDI5y1JzW82xYIbUmmlMTX9ssvqnCmBAC:BSwHkxto+ySXjcYwX9NyCw
- TLSH
  T1DF073329D6BEC6D499F3B3E5FD7996E364CC654D0113E27E882400C3AAE073B35A416B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  @#!Latest_FILE_2024_PaSṣCoḒḕ'_^$/Setup.exe
- Size 669.5MB
- SHA256 936535ffefd7fc3990961801724886c5b25a2c147b7658ff048177e273949cc8
- MD5 407f6a84aaabc7c7db5a0176a7d7814a
- SHA1 81521e8794a88eac9e3b5c2475f9915991ece7b6
- SHA512 f7458f2afd9f872d9265504962cc35ed88b466e63e7149512654d7ac59cf0214843bf32b431c9df61a7970f157ebaf29348d2919270bc0fe7b4114a3183250fc
- SSDEEP 196608:Yub2wKRMZw8PD/A8srJ2NmYbHbyScncdCfqCKkLIt8H:YuiZWZt
- TLSH
  T1637933C277C19D2EFEA690362B69E1D1167AA9570523E53F1F882D79BD70070823E263
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery lumma privilege_escalation stealer
- Family: Lumma Stealer, LummaC
  Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
  stealer lumma
- Loads dropped DLL
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
- Suspicious use of SetThreadContext
behavioral3 behavioral4
- Target
  @#!Latest_FILE_2024_PaSṣCoḒḕ'_^$/x86/API-MS-Win-core-xstate-l2-1-0.dll
- Size 12KB
- SHA256 7cf73e4f69b3dfd89f3b24167f2f421b17537f3a4e707c63c675457b4fbf850b
- MD5 b685358b3d0f37b68a24a6862f2ab63c
- SHA1 b98d6706b7c922a2c93a75280e599361502697d1
- SHA512 965580bfab334a217625e64dc5ab8622dcd18e5377453252b0c40c8e171040411a8916145f98e1bbe7476ad140562ea52ba148bf584d3389a07c2654d122e9b4
- SSDEEP 192:kf5bSWAhWLW4pICSjRof0cVWQ4GWKJYmf6oEOEU+9YX01k9z3AWBjZJPP:kf5bSWAhWx2xlcomf/EOQGR9zBdb
- TLSH
  T14C423B878AA88443FDEB6EB053E8D9973C3D97D61540906646D8F65828D33C1EF2077E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  @#!Latest_FILE_2024_PaSṣCoḒḕ'_^$/x86/App.xbf
- Size 1KB
- SHA256 358b9f84ed4326fc989fb70f5d6d17e8e268eabb476b9e3ef6270872b00189f3
- MD5 fc6f983b839f1d0702c0d40f107313fb
- SHA1 f0987f6305ff7b0e8d2b625ef5ad8fb5b0ce4081
- SHA512 f7e2b98d9898a99a14bb32d0ad478c0ea4d9713eb4424c0b1525d5e37855ed9f835db678d3ff590eaadf437c408d4a740eb3676adcee822d73a4c0e167b8e6f3
- TLSH
  T1DF216891B7F92615F0F39F783CF614112876BF629F15C28E0164022A6062E54CAB1B23
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral6 behavioral7
- Target
  @#!Latest_FILE_2024_PaSṣCoḒḕ'_^$/x86/AzureKeyVaultDgssLib.dll
- Size 313KB
- SHA256 dec89c1e8bd55c43d3d13a7903d75dbf5c1f3ba8969202bef1182bb899fb7e02
- MD5 b6686de78cbf5d0ca0c0928f77d02b20
- SHA1 db873b4b688160a7e6fe7ade6cb0d92c359a1b6f
- SHA512 0f35420ab039b438e198bab6dbbe111dc5c6b35bddd714d9b732507e390fe68925637005f8ddde07ad1bd142ae599d53ac3f5224700a1629141e33d9329bd6cc
- SSDEEP 6144:eRp2BVvYu6uP9Fp6j5FtQswN1mxwD5GLg7:CAvpP9Fg9y1oQ5Ig
- TLSH
  T19F648C60B5C9C432D56F15305638CEBB993D7A710FE1C8CBA3981D7E1A362C29731A5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8 behavioral9
- Target
  @#!Latest_FILE_2024_PaSṣCoḒḕ'_^$/x86/MessagesList.xbf
- Size 5KB
- SHA256 c5724f6671b6c249de3117ff7c51e10eb9e4e01af9d16174796b1b47956da046
- MD5 5a9832f672525972d22174f116ed093c
- SHA1 df2c9bb51e069b61ce565e32f34a0dc2be3beea1
- SHA512 34d3a9e7a57d1c630d22ec31fd44ec33f510dd017441bcc8afde5dcfcaac3933dd624adf2e43412e965222805892b68e6d707db3db84f0254af074c5848e94f2
- SSDEEP 96:qk6Xah8hO8D8Ows2DSGcDVkuKTlv12B19hHfzTN16/1e43ByZyaBoH1UlK2fK2qY:f6XTFqMyLif43QZy6oH1UlK2fK2qK5L/
- TLSH
  T135B1C00297F51148F2F6AFB06DF64A1716B2FE169D21C29F4124176E1AB3F80CA75732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral11
- Target
  @#!Latest_FILE_2024_PaSṣCoḒḕ'_^$/x86/Microsoft.Toolkit.Win32.UI.XamlHost.dll
- Size 101KB
- SHA256 dd136f1fd23e91866a53b9e9a0f28c83fa63c2aee01e61b3fc280e8f8fe549ca
- MD5 14c39cda89987d637565e45b7e04f5c8
- SHA1 0f898db374ebaaca09d2fb6f2bc480684ab897d3
- SHA512 e1df756046634942524cdb9c105313f277c8f30ea62a9b28ab2d4f7170507a1442b0def247e08ce36e24abfe82e5002c0f12af82d5854e6439632d555b072223
- SSDEEP 1536:tt251yrMljTsi/Vjwwhf6jhAGGapdykufffLvw9SPf/qB6h59nDDy5m7RvtLslNj:tYDjTFtjwwhfWhAGGFbtYD
- TLSH
  T1C7A3FAA0BB74A2F1D99E17301CE7FE895B3130539FD142C36E1A675E99A1AD32FB1081
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12 behavioral13
- Target
  @#!Latest_FILE_2024_PaSṣCoḒḕ'_^$/x86/Repackager.VisualElementsManifest.xml
- Size 252B
- SHA256 1cf413e8a073162dfb9ea5e82230949bb52c66b19e591a5ce18dfa36b4676838
- MD5 bcf3b44f1bb63ee4d851e7e447d4122d
- SHA1 22c39f88bca33353ac57c83f8cd144e5a99a4441
- SHA512 aee62b9c7a5fb494d19f163c27aec1c849ae074e67e8607e8401d26da9b127b55e0a1e05d244764601a065e1daf59635376f876b91215dd545b1457584eb9c41
- TLSH
  T1A6D097DCF2B88850B6E36EF69034C8C5322E319E85C819C0F4F41663140208E034B107
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral14 behavioral15
- Target
  @#!Latest_FILE_2024_PaSṣCoḒḕ'_^$/x86/SciLexer.dll
- Size 587KB
- SHA256 e7d343d228f308c914942e7edc5884202531b9e14576df3fd38f526366d95f83
- MD5 ecb548c748477d483dce46f8886d6513
- SHA1 9ba5cad12a17dd5c0d7acbc8c9323eb155cbc24b
- SHA512 1827cba36ffe5d4fc9aa4c542ae4d4763443306a4928a470e674a26e0cf6372a9cd0ec7ae7078a8617991c32cbd07cc766a952d172481a73cac151e819e5a91e
- SSDEEP 12288:YiQs/SseNwocpnExj51FduHvsyYzTIrZya8J7XmiPpu6oYSKIIJWMj6dXwDbipK+:Yp89pnExj5ly0TIr8JrmupucOAQRRakf
- TLSH
  T143D45BD29ACB20E3D58A157165AFBF2FD56860273B30B8D3A0A8CD15E5352E36E34371
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral16 behavioral17
- Target
  @#!Latest_FILE_2024_PaSṣCoḒḕ'_^$/x86/StartPage.xbf
- Size 15KB
- SHA256 59ce1bd2f1e4f35c9752ca54bb0087ccbedd55c7d988f5812fe7fbefc3582694
- MD5 c3bc92594ab0223ddf6509529853bfa9
- SHA1 3f25e6c5ac15568a5929cb2009c1774defa1c4c6
- SHA512 96067de31bf3f0faea24c04608246ecdaaccd98cf5f5499394c95e1ca7a97f706ce9b5862532345c624febd787af2d3444766007d1f433b4000e96d38c4014dd
- SSDEEP 384:qERHcwgq02ejStqXsVFy7QPOxTNVd6rp6GDGyJKBBOL/tMKCgK/zbUop:HS2ejStqXsVFy7QPOxTNVOvDGyJKBECv
- TLSH
  T12E620103E7FA8104F2F35F769D7A4A2429BBBD325C22E56F4109110D0AA2B90DAF5777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral18 behavioral19
- Target
  @#!Latest_FILE_2024_PaSṣCoḒḕ'_^$/x86/Updater-comproxystub.dll
- Size 107KB
- SHA256 b783097461d888b3d86598dd85a7aeef2a02969e2c129ca685e38c369f92cd1c
- MD5 3e953e320b2ed70fb08a31b59c644f3a
- SHA1 d67fff5c95b19e72547808f66d961a89674a1f71
- SHA512 0dd330685437b34af045732863d7171003927e373303880590462f0731b29831f69ca31e0d687cd50d0257cfd10cbd7545df4a4c4acdc4849950734425fc44cd
- SSDEEP 1536:B5Xzx/AVRY5LQ7/Bor132dOhJ7Vwd+3N0RDsWdcdR2TLKjUJrC3o3X/97ufInffu:fXz2jY5LQ7/U32Y3MaR2TLKwJr7e
- TLSH
  T1F0B35B41F5C08030DABF193A05A0C5A16B3E7A60DFD25EEF2B645AAE0F352D0DF35966
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral20 behavioral21
- Target
  @#!Latest_FILE_2024_PaSṣCoḒḕ'_^$/x86/WinUiBootstrapper.dll
- Size 866KB
- SHA256 596ec2565bb228fb8a8089b5fb9fa782d46897ed12ce00d28c65bca673239391
- MD5 3c3cc5e4a48dfbb9c555c1219838dcbb
- SHA1 183e171b856cbf908bda0914db039a7cccaf7b4e
- SHA512 1e18ce24b7bf9c4997602935d51c489df903e469d6924d18e9bf2d3a05bb97506b7adac97ed2dd508ff2151b31e48e4ea198b703b41ce22b47f2a8d53036b477
- SSDEEP 12288:iRkb3PTKL9xSD7kHV6MRY0OW4WEnmOKAI3xwnT4:Ok7rKL9wk1VIW8nm8I3xwnT4
- TLSH
  T13E153B707A4DC135DAAF05F65C2C998FB41DAE8A0BB504D3D298F60E9D348C36B37A25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral22 behavioral23
- Target
  @#!Latest_FILE_2024_PaSṣCoḒḕ'_^$/x86/api-ms-win-core-console-l1-1-0.dll
- Size 12KB
- SHA256 915c296fabf88b9e3b43b5a570a6e8e642071678ac443c555f6e95bee7925bc5
- MD5 cd3ab89fadee9d9ab307f55390798102
- SHA1 7f5646953d2a90c1033cfee8d2e6d394b05d0a5b
- SHA512 5b68fbe6456897695fdbc683dd703c286531e831fa3039ba19bc376ac5f363cd0588a815156b18139b82e64ae5c9d87bee025805658005e46d3fce915a9f332e
- SSDEEP 192:WsxkWAhWqKW4pICSjRof0cVWQ46Wm3Kw2uF552v++X01k9z3AzsqTWX:WsyWAhWqA2xlcNKw2k5+R9zusqTWX
- TLSH
  T1E5522AD39EFC8043F99A6DB042E5C953BC3DABCA1901A01525D8F69C2DD33E1EB1466E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral24
- Target
  @#!Latest_FILE_2024_PaSṣCoḒḕ'_^$/x86/api-ms-win-core-console-l1-2-0.dll
- Size 12KB
- SHA256 67f4d89f85a61b18ac1f5d6d04f625d64bedb252c219ff9785cd1508876bc718
- MD5 4228b8901e130b70052da8562dc7b5b9
- SHA1 5007d4da77465c38d66689312418acbef9c7aace
- SHA512 cb42b5a184fe08df207ac391c3e87d44dba15008efe2caaa0774439e8f7df2ec35f63e981d080fdb8fe2f46e8a43ff58a332d6cd241313ce419fa2ea0ac2f40e
- SSDEEP 192:OuGh8UWAhW2W4pICSjRof0cVWQ4+WtmFpF+nasu+JX01k9z3AzsiQ+s2s:OuQWAhWU2xlcLpUad+JR9zusiQ+Rs
- TLSH
  T1C85208C78EFCD542FDAAAEB056E5C6037C3D6B861500A01966E8F61C18D33D1EB2476E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25
- Target
  @#!Latest_FILE_2024_PaSṣCoḒḕ'_^$/x86/api-ms-win-core-datetime-l1-1-0.dll
- Size 12KB
- SHA256 55804126146c7c575add104eec386f161672cb740e765eaaf7ec8707a7cd2af6
- MD5 bb66dd4c715754bfa99abbcbee3a4449
- SHA1 21a9bef9112c1a614bf3d5f6eb2d2f0f17b58531
- SHA512 aa3b8ec6c34ce2d162783595ff3902cc1e8812ead15f2e723feb82fb0202f654d7e1138e4b3f83c7cc0204e15c41a34ad0b1d07fd3bfa609e97c01241271d136
- SSDEEP 192:OKWAhW8W4pICSjRof0cVWQ4GWzyB9g8YIN5vCX01k9z3AiR62EIY3:OKWAhWy2xlcD9g3UJCR9zdR6F33
- TLSH
  T106422B968FACC043FDEB6AB052E4D9437D3CA7D31540806A19E4F59828C37D1EF2466E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral26
- Target
  @#!Latest_FILE_2024_PaSṣCoḒḕ'_^$/x86/api-ms-win-core-debug-l1-1-0.dll
- Size 12KB
- SHA256 d95f01fc571294b128d0cfde5e68472b8f6a0b3dd5f0c18b676e3a077df80cc7
- MD5 1c76698d36fce20d2919e67e3f08bfbd
- SHA1 eb85df5d35cad00ee7eda50e8a4eceb2490f9245
- SHA512 7b0a9de7a2fab1b969b469f7e7edde93b9ede530080f4090ca0066642ce6bba28023bdb8ac5bd85eae38d918549be7066981a08263a3fe2a657a5cec15c62487
- SSDEEP 192:6PWAhWxW4pICSjRof0cVWQ42Wp4KjVyEBsvH3Tz7PX01k9z3Aeu6C2m+k/XIW:UWAhWX2xlc3KjV72vH3rPR9z/unVsW
- TLSH
  T1FB422A9697BCC043EEEB6E7042A8DA437C3C67C72610D16945E9F5482CC37D1EB20A6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27
- Target
  @#!Latest_FILE_2024_PaSṣCoḒḕ'_^$/x86/api-ms-win-core-errorhandling-l1-1-0.dll
- Size 12KB
- SHA256 8b4a9ba2855247adddb4ee1e7f503dad5674ea7bb45015bd69cc83a3332f696b
- MD5 b2eac5c213cc442820167617d568e179
- SHA1 9e61baac12e1a536be5e553530db8957ac606d37
- SHA512 af7a8e6e16b86d4e2aa3141fd41a8c897957486b4d87d8ed14210590e86577e030b4b7c419ed988d22851c5fdf75236c23560fd855ada97a76459c9c93802c83
- SSDEEP 192:oTYimxD3vWAhWVxWCYtvnVWQ4+WcilnvpF+nasu+JX01k9z3AzsiQCkL:oTYi8WAhWVw7SpUad+JR9zusiQx
- TLSH
  T1F84219C687BC8043FDEB6A7013E5CA137C3D6BD62A50915A15E8F6582CD3380EB2476E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral28
- Target
  @#!Latest_FILE_2024_PaSṣCoḒḕ'_^$/x86/api-ms-win-core-fibers-l1-1-0.dll
- Size 12KB
- SHA256 cb9f01af9ba4b50c604633073e4003652f1e99faff93daacd4502d4c08177688
- MD5 38646cd15ac25a8d71bab09d5b077338
- SHA1 4c153622a3f069480a194bf98add276f9138e168
- SHA512 43844f5e82c7bf6a485a5411ce19aad3bb0f418852b86bb479f41170d85e04d02eaa76092b84ac7a1abf14b285d66fa2ff891cc9c97bbc18633af14ec44cebb5
- SSDEEP 192:ztWAhW0W4pICSjRof0cVWQ4GWxlRrZYIN5vCX01k9z3AiRLnq4Khl:pWAhWK2xlcMGUJCR9zdRLngv
- TLSH
  T17742099B9ABC8047F9DB6A7052E4D9937C3CA7D71910916A15D8F5882CC33D0EF20A6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29
- Target
  @#!Latest_FILE_2024_PaSṣCoḒḕ'_^$/x86/api-ms-win-core-file-l1-1-0.dll
- Size 15KB
- SHA256 420395ac9ab87accb00fa478be0b73b583a42d406d1341d98a77f6189b556998
- MD5 4d0399f0050b13586b8b04f62e95b16b
- SHA1 407ca079a3bbe2837203beabf41516fdba776a16
- SHA512 8908cbf7cb7b87fc78a2baa1eb2aef52303e733987891361db07098fb70d776fe936d48221a846787d67adcfbaf30ad93b867d5578b7dd566fe8addc480cda18
- SSDEEP 192:7USYPvVX8rFTslWAhWrIW4pICSjRof0cVWQ4GW/SvP1MobYIN5vCX01k9z3AiRpF:GPvVXHWAhWrG2xlc02deUJCR9zdRpdD
- TLSH
  T18C720A97D9A4E24BF8CF9B7151A2C8836C3983C2041450DA1BD8B79C3CE73C6E7A859D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral30
- Target
  @#!Latest_FILE_2024_PaSṣCoḒḕ'_^$/x86/api-ms-win-core-file-l1-2-0.dll
- Size 12KB
- SHA256 b2546e21336714858d2b03d2532b6955dcd7ff46b30435f6d309d8c39d0dc957
- MD5 918b087149a2571d9db1eb04878c3603
- SHA1 aa1d2c7550df6eddd2e99b44ac9de925888281ad
- SHA512 07c0d13e505c69985d6354c450887260345dc59468eb82b9b0534d1bd13f5f960d2d56932b204b300ac7e5f0ff7234c5e459de06d0e466fbc3f710fb9551793d
- SSDEEP 192:hWAhW/WCYtvnVWQ4iWBnTCFaqDu0K9X01k9z3ATd8gl:hWAhWmcTCFYj9R9zsd8gl
- TLSH
  T17842298797B88042F9EB7E7013F8D5937C3D67D62A40901A1AE9F55828933C5EB2062E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31
- Target
  @#!Latest_FILE_2024_PaSṣCoḒḕ'_^$/x86/api-ms-win-core-file-l2-1-0.dll
- Size 12KB
- SHA256 b5823ce2d6e600eaf4e2b1353600dca0351c46d014f97ac525c3ee9dafb2bf4c
- MD5 320629a907048b64a99ef484417df721
- SHA1 0de1886eae33bb5f16de27d647048a92586259d4
- SHA512 6567cd36297cb05ed301e5f7eec87a5f796aeb9fb63ba30cbe73087bbe9539e2dc47a11947c8461cd79ead01052999913143d32ecf4cbdf5833a970e61d5bfc4
- SSDEEP 192:MnTWAhWWkWCYtvnVWQ4GWBbMwDvWrkAmSGL16X01k9z3ANoKLj0o:aWAhWW/HwLMB+6R9zqoKLj0o
- TLSH
  T1B9422AC69ABC8043FCDBAE7013F9D5A77C39A7C71940916A05D8F9482C933C2EB2466D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Process Injection

T1055

Defense Evasion

Modify Registry

T1112

Process Injection

T1055

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Family: Lumma Stealer, LummaC

Loads dropped DLL

AutoIT Executable

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32