Overview

overview

10

Static

static

3

Ulpack.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Ulpack.exe

  • Size

    10.7MB

  • Sample

    240628-1zs2sswerp

  • MD5

    52b105f53cba19ed897bc7d08f2373c3

  • SHA1

    983a8f9b34441ed6e062842bab4b7137b29cc721

  • SHA256

    9fab6244c65eab9863d45c1908f8dc64116c5a18e7680b00e9b6646ec91b440f

  • SHA512

    786fa01b73163b6dad1cb3a14216c674fa47c40ec3dc2e464ca2a65f2e8b7423649032a508aba6b0b289080a6151e6846d02a04903a2a4586f22155f4104a789

  • SSDEEP

    98304:M/zCs0T3+6x1DkITYkn9dD11lXfceCEoZYVb0PJaxrIjioPT0:Syu6x1DkOYkn93Xp7lrJ

Score
10/10
lummastealer

Malware Config

Extracted

Family

lumma

C2

https://citizencenturygoodwk.shop/api

https://potterryisiw.shop/api

https://foodypannyjsud.shop/api

https://contintnetksows.shop/api

https://reinforcedirectorywd.shop/api

Targets

    • Target

      Ulpack.exe

    • Size

      10.7MB

    • MD5

      52b105f53cba19ed897bc7d08f2373c3

    • SHA1

      983a8f9b34441ed6e062842bab4b7137b29cc721

    • SHA256

      9fab6244c65eab9863d45c1908f8dc64116c5a18e7680b00e9b6646ec91b440f

    • SHA512

      786fa01b73163b6dad1cb3a14216c674fa47c40ec3dc2e464ca2a65f2e8b7423649032a508aba6b0b289080a6151e6846d02a04903a2a4586f22155f4104a789

    • SSDEEP

      98304:M/zCs0T3+6x1DkITYkn9dD11lXfceCEoZYVb0PJaxrIjioPT0:Syu6x1DkOYkn93Xp7lrJ

    Score
    10/10
    lummastealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Matrix

Tasks