Lumma: analysis environment check
Lumma Stealer profileBefore it starts working, Lumma collects system, hardware and language information and checks for virtual machines and analysis environments. Malpedia (Fraunhofer FKIE)
Malware checking whether it is running in a virtual machine or analysis environment and stopping if so.
Security researchers and automated analysis systems run samples in virtual machines. If the malware recognizes this environment, it behaves harmlessly and the analysis result is misleading. MITRE ATT&CK
The checks look for signs such as virtual hardware driver names, low processor and memory values, processes belonging to analysis tools and the absence of user interaction. MITRE ATT&CK
It collects hardware, driver and process information. MITRE ATT&CK
It matches it against known traces of virtual machines and analysis tools. MITRE ATT&CK
If there is a match, it exits, sleeps or takes a harmless path. MITRE ATT&CK
Before it starts working, Lumma collects system, hardware and language information and checks for virtual machines and analysis environments. Malpedia (Fraunhofer FKIE)
See your firm's attack surface on one screen: how many findings, at which severity, on which domain.
We use cookies to ensure proper operation of our website, analyze usage, and deliver relevant content and advertisements. You can manage your preferences at any time. Cookie Policy