Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
-
submitted
01-07-2024 11:35
General
-
Target
07c09ba5a84f619e5b83a54298ffc58d20b00f14399c7a94b7f02b70efc60f35_dump.exe
-
Size
314KB
-
MD5
9e849d8e3b0b04bc6a5962972e56e62a
-
SHA1
c9b60072e3690d47df4b1814f71b03110f775abc
-
SHA256
812e0c9b8511b090c461252ef56cae8c19b78acb964f240e45c840cee578846b
-
SHA512
05f624c2d48e1882a3b0a9d4cf20cfdb50b02d39631fdf541e41c5e23dfddeaf1ed99ba040f21f85929df5e480e4fb5ca349cc3c1e40539d32273eec6b3cab17
-
SSDEEP
6144:NCsnEQr45Da+ugYRcQJguqQ2nCwZHhlCEEeyTVEfD+Av:N/EQKD/ugtuTgXHhlcey5EfD+m
Score
10/10
Malware Config
Extracted
Family
lumma
C2
https://potterryisiw.shop/api
https://foodypannyjsud.shop/api
https://contintnetksows.shop/api
https://reinforcedirectorywd.shop/api
Signatures
-
Lumma Stealer
An infostealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\07c09ba5a84f619e5b83a54298ffc58d20b00f14399c7a94b7f02b70efc60f35_dump.exe"C:\Users\Admin\AppData\Local\Temp\07c09ba5a84f619e5b83a54298ffc58d20b00f14399c7a94b7f02b70efc60f35_dump.exe"1⤵