Overview

overview

10

Static

static

3

Setup.exe

windows7-x64

1

Setup.exe

windows10-1703-x64

10

Setup.exe

windows10-2004-x64

10

Setup.exe

windows11-21h2-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Setup.exe

  • Size

    50.0MB

  • Sample

    240627-t2m51azdqe

  • MD5

    176ca85e355951d13c5fcf56265adf1b

  • SHA1

    0c4462f639b99404b7b8572b0081699f48852039

  • SHA256

    6867e6620458e628fb77a72d15bf51d50136a49fe3103d818737faf8d3870f3e

  • SHA512

    97b776b784821670f07b5faa4497158b8f7b6b35f86039926e2a472dfcf39d21ca80f8b7fb0f77a4e441b65ef8d51145be7010868190f2fff50cb56d3fe40931

  • SSDEEP

    393216:PkfR0eh8xI7rPx5I5D8qB1JsbD3rn2Uk:cfR0eh/7rPx5I5D8qqP7

Score
10/10
lummastealer

Malware Config

Extracted

Family

lumma

C2

https://harmfullyelobardek.shop/api

Targets

    • Target

      Setup.exe

    • Size

      50.0MB

    • MD5

      176ca85e355951d13c5fcf56265adf1b

    • SHA1

      0c4462f639b99404b7b8572b0081699f48852039

    • SHA256

      6867e6620458e628fb77a72d15bf51d50136a49fe3103d818737faf8d3870f3e

    • SHA512

      97b776b784821670f07b5faa4497158b8f7b6b35f86039926e2a472dfcf39d21ca80f8b7fb0f77a4e441b65ef8d51145be7010868190f2fff50cb56d3fe40931

    • SSDEEP

      393216:PkfR0eh8xI7rPx5I5D8qB1JsbD3rn2Uk:cfR0eh/7rPx5I5D8qqP7

    Score
    10/10
    lummastealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks