Overview

overview

10

Static

static

3

github.sof....2.exe

windows7-x64

3

github.sof....2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    github.software.1.2.2.exe

  • Size

    520KB

  • Sample

    240628-llyb2avgpr

  • MD5

    aaf7cbc3351d2a7dc6e44aa409ba2516

  • SHA1

    e25f6668f571da4cec99e8587ee2f52fc2f50652

  • SHA256

    4e090a508e83582035b3f77ac28f7938595596e17c2fa4c150d429828a7eeae1

  • SHA512

    0b2da9b21f4ca5d69d0a9172681d818270e633c8b272a26a4baa702475f0293b1ccfc795df5f5f91e13ac286453c57915c5374a73a86a195ac2783dac6584217

  • SSDEEP

    12288:AhEf+bfJjHdny8z01jdYN74UeBG7pMdW2mf:AQ8fJLdyL+7BKdW2m

Score
10/10
lummastealer

Malware Config

Extracted

Family

lumma

C2

https://closedjuruwk.shop/api

https://potterryisiw.shop/api

https://foodypannyjsud.shop/api

https://contintnetksows.shop/api

https://reinforcedirectorywd.shop/api

Targets

    • Target

      github.software.1.2.2.exe

    • Size

      520KB

    • MD5

      aaf7cbc3351d2a7dc6e44aa409ba2516

    • SHA1

      e25f6668f571da4cec99e8587ee2f52fc2f50652

    • SHA256

      4e090a508e83582035b3f77ac28f7938595596e17c2fa4c150d429828a7eeae1

    • SHA512

      0b2da9b21f4ca5d69d0a9172681d818270e633c8b272a26a4baa702475f0293b1ccfc795df5f5f91e13ac286453c57915c5374a73a86a195ac2783dac6584217

    • SSDEEP

      12288:AhEf+bfJjHdny8z01jdYN74UeBG7pMdW2mf:AQ8fJLdyL+7BKdW2m

    Score
    10/10
    lummastealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks