Overview

overview

10

Static

static

3

Loader.exe

windows10-2004-x64

10

Loader.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Loader.exe
  • Size 3.0MB
  • Sample250904-19raysyny8
  • SHA256 422db641c3ca5c90d2a9df87e8d761db1b17835f87153312488b5f7e60eccb10
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

  • lumma

C2

  • https://marvelvod.com/uqia

  • https://mastwin.in/qsaz

  • https://digitbasket.com/pqox

  • https://voando26.com/iwnn

  • https://iaed.link/ndbh

  • https://pyscalp.com/iqop

  • https://lzh.fr/mnsn

  • https://streamin.style/iqzb

  • https://phoenix-brands.dev/qyzb

Attributes
  • build_id

    0e83eb65c1767e3cea6f94aa3451df66004b28ccee65031cd9

Targets

    • Target
      Loader.exe
    • Size 3.0MB
    • SHA256 422db641c3ca5c90d2a9df87e8d761db1b17835f87153312488b5f7e60eccb10
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    discoverylummastealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks