Overview

overview

10

Static

static

3

2.exe

windows10-2004-x64

10

2.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2.exe
  • Size 3.0MB
  • Sample250904-ryptbasrx8
  • SHA256 c840481bc1a832a04da5a0556c3f7fc3cf4a81e2470179c3db0e987b473169e9
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

  • lumma

C2

  • https://t.me/quincyplayer6

  • https://starexs.bet/tskx

  • https://mastwin.in/qsaz

  • https://noggs.ru/yopd

  • https://georgej.ru/plnb

  • https://oneflof.ru/tids

  • https://epitherd.ru/zadw

  • https://backab.ru/lkdo

  • https://eigwos.ru/wqex

  • https://kimmenkiz.ru/zldw

Attributes
  • build_id

    c97e3ae66eb65ee322359c3742822a73

Targets

    • Target
      2.exe
    • Size 3.0MB
    • SHA256 c840481bc1a832a04da5a0556c3f7fc3cf4a81e2470179c3db0e987b473169e9
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    discoverylummastealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks