General

  • Target

    299e7cda75bcbaf576fe85afc0a1f993

  • Size

    1.2MB

  • Sample

    231231-fx5ycsbfbk

  • MD5

    299e7cda75bcbaf576fe85afc0a1f993

  • SHA1

    897bbd813e5acf8f2e6d41531d9a3079dd67a8ea

  • SHA256

    88e4b4a9fb614ec33e573354ecc8086e77d3703fd89b7efd3acc5f8de99287f1

  • SHA512

    9ce2f3c6bdaf0cb31cdb5f7ad9bded6f7fbf21f259a5fca1397d69193b4f934eb05a2e026636ce84e53b91d4819de2e0ef425a3232658bf5dba95ca0cc3521a7

  • SSDEEP

    24576:BQHk18m7hgeUR3Gw4K2unwWJ7DFzkKGTP0oOYvw:BQCBhUwRVWHzkTLGY

Malware Config

Targets

    • Target

      299e7cda75bcbaf576fe85afc0a1f993

    • Size

      1.2MB

    • MD5

      299e7cda75bcbaf576fe85afc0a1f993

    • SHA1

      897bbd813e5acf8f2e6d41531d9a3079dd67a8ea

    • SHA256

      88e4b4a9fb614ec33e573354ecc8086e77d3703fd89b7efd3acc5f8de99287f1

    • SHA512

      9ce2f3c6bdaf0cb31cdb5f7ad9bded6f7fbf21f259a5fca1397d69193b4f934eb05a2e026636ce84e53b91d4819de2e0ef425a3232658bf5dba95ca0cc3521a7

    • SSDEEP

      24576:BQHk18m7hgeUR3Gw4K2unwWJ7DFzkKGTP0oOYvw:BQCBhUwRVWHzkTLGY

    • Detect Lumma Stealer payload V4

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Modifies security service

    • Executes dropped EXE

    • Loads dropped DLL

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks