Overview

overview

10

Static

static

3

5de143343c...b0.exe

windows7-x64

3

5de143343c...b0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    864fb28b0001b98ddd896dbdc604db30.bin

  • Size

    416KB

  • Sample

    240625-cn75ksyekp

  • MD5

    fc87a7dc3984d56938fc74dc47af45c5

  • SHA1

    5dd71cb0161b7943ab54fc070ebd364443933d2e

  • SHA256

    0d37e905b988a1a2853037b640323d691a39e7bcc68434b3cb43f42bcae1a9f4

  • SHA512

    eb7a2b73aa84619748979505dd7b61445c203e35bbfce55f8d1a41eb3771b2bfd8bc56579e099175523c1afb92d2559f2083da833cee789e08dc361fb8a5f7bc

  • SSDEEP

    12288:dS+VIofIpDsO1BSZAaUItPCWXdmKsVxfMIdxl0l6u:riorYS93mbxfMU6t

Score
10/10
lummastealer

Malware Config

Extracted

Family

lumma

C2

https://backcreammykiel.shop/api

Targets

    • Target

      5de143343cc0a2b03f076de338308ac58eda529f6814a2e2266531d8ae09fbb0.exe

    • Size

      524KB

    • MD5

      864fb28b0001b98ddd896dbdc604db30

    • SHA1

      2c7691795b4313704b79c3dfe70b956e84b45a11

    • SHA256

      5de143343cc0a2b03f076de338308ac58eda529f6814a2e2266531d8ae09fbb0

    • SHA512

      a7bec87ea630cbcfb28770bda372ebb7435f753caf6b8255c06d546f11a56c60018ad75f16938d50bb88749b2a2be970c9a9708455b65e5619dc4acae5be1317

    • SSDEEP

      12288:cckdVi3+T/Tvm4YqTwEa+1mieYTAk+tvC4hV8vTuNnlv:ccoNT/laKmu6K5vTuNl

    Score
    10/10
    lummastealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks