General

  • Target

    1a608aa3c5deb1bc058b4afc3d0a1b3f.bin

  • Size

    14.6MB

  • Sample

    240114-bhsx2ahccj

  • MD5

    1a608aa3c5deb1bc058b4afc3d0a1b3f

  • SHA1

    bce8c18684bcaf57177552bb87a85a319509b593

  • SHA256

    db063e1db8848a6186721331ae76e07f1615856345dec12b08a2b215ac5bb29b

  • SHA512

    6319973c7480e1e38037ec5fd384da7253c2fcb1b9b118f85837fb186d5058eca12c86414af752c69c93b8732d1034afb15482a3617721364d223d0a8d418054

  • SSDEEP

    393216:zNue0YFzaLI58yB4fdZj92X60oTwoZrUybMS8:2yzkImyB22XSQ

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://goddirtybrilliancece.fun/api

Targets

    • Target

      concrt140.dll

    • Size

      2.3MB

    • MD5

      ab626dd445d8cba4713f0bf29c307418

    • SHA1

      bae8c51bb9b30e9d73c16beba92924fe290f9a5d

    • SHA256

      690c67fe8d5c6a6c3f1f72e05214e674a876ed865db14bb34f9b39cff21f7645

    • SHA512

      190c8b5b068a367c58dc47982542213eebbdeb49280b50d49d238dbec494ad214418ad19af5e6b6d1db44acfd38ab704fa01465de529074d4e7caf305d7bce3b

    • SSDEEP

      12288:z+CpeAUpXuu/KzYw6ItOCikMwxv5sF10UOOSuHLtz/RZQ9ZfeUnrQnqOQ0W4cm6T:z+CpeAUpLyzYmget

    Score
    3/10
    • Target

      cpfe.dll

    • Size

      4.9MB

    • MD5

      f0114abee0d719dee97b78058453d387

    • SHA1

      348558256ccfc339b70ba695b7a852c188354aed

    • SHA256

      11d8e3ca83d044d7e5595caed143fb4634ba18834aceee82963a1b80432351bf

    • SHA512

      9d2fa6b4b73abbfdbc3ef1b4581104d684269b4f9f3a5f50bf88d5b5805903cc524453162da4672a2175ce8efeba080e11d81e8bddd995d3ebb2c47ee5851b4b

    • SSDEEP

      98304:aXvjpr5EwEbgUq1m7tXIbbEIrOnEYojXQi59+tqK6LGC/nN9ydiGfQ/Z35WBe8h+:2/N9ydQxp61hnnCIMZpgqO4UAH

    Score
    3/10
    • Target

      kopje.rtf

    • Size

      1.8MB

    • MD5

      e5cdf4526cf9375d80f5c22b1bc86c95

    • SHA1

      391cf3b573d3c838f7df9e3d18001023896b0013

    • SHA256

      17435edd6216614a9443a44f4767b2545a32741e08544eb586c843533c0150dc

    • SHA512

      843720962278acacbdb2fa9ce645a40d29d7144d3238b2b39100b925619ef3b229e985ed0a5558e978684bf0f63c34fe8c96a00655d96c7e261aa06eaf22f65f

    • SSDEEP

      24576:tZ4MYjphBIcvd0s/G05+wSi5jOSJN6Wtv/eBPB5LXXeTeVhvlgv+DmT4wPp:t2rjLycV0b+z5aS7JwvXeT+9lC+wPp

    Score
    1/10
    • Target

      lnstall.exe

    • Size

      1.4MB

    • MD5

      38901633c833cba7f682472ced0dbe4b

    • SHA1

      0c11a1ac834d2b270ba60f3605109933ca11a7f0

    • SHA256

      a5c5487194f761dac90e178c9c1753c0f47b041f3168b5c23a587f33f69e5089

    • SHA512

      70d71197c68c9a92883c482aee76978e2a01e785be6fb3b6082369e25d991d3e03d8467e11d87493e54f5a3dc4bcd59fa588f0fabe5f6fdcf3361de95cb471c1

    • SSDEEP

      24576:gLikjHtEvSKi9Q8K8Nj99HxJ+EbUUbnI11f4wuTLoYHTkPQ4JD7eK:gukT+SpRKaJb0f4wrCSP

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

    • Target

      msvcp140.dll

    • Size

      437KB

    • MD5

      dc739066c9d0ca961cba2f320cade28e

    • SHA1

      81ed5f7861e748b90c7ae2d18da80d1409d1fa05

    • SHA256

      74e9268a68118bb1ac5154f8f327887715960ccc37ba9dabbe31ecd82dcbaa55

    • SHA512

      4eb181984d989156b8703fd8bb8963d7a5a3b7f981fe747c6992993b7a1395a21f45dbedf08c1483d523e772bdf41330753e1771243b53da36d2539c01171cf1

    • SSDEEP

      12288:kKB+zFjoLcAtFSYy9PA7TEsnmLIxhUgiW6QR7t5s03Ooc8dHkC2eszslz:kKMzFj4tFSYyO7TEsnmLIe03Ooc8dHkw

    Score
    3/10
    • Target

      plugins/access/libfilesystem_plugin.dll

    • Size

      59KB

    • MD5

      8fac15d2a2da66abdf345afa45ac5e3b

    • SHA1

      553d4c9f39726d8aadb15fed7c904048928049e0

    • SHA256

      66ef741a9282b420b09b940fbdbf666cd1625a8da18daaece036fcc4e1a74d38

    • SHA512

      f756e3b3368245d4670cf0f86a6727858e3ead983b3e10c11d9b13e67d86b632703f44df70e648bb8edcad295744c763a268f4eb02ace0055405c3e9af124548

    • SSDEEP

      768:D2y9ohNIged8Yy0NBdeOWxRPxYoWE487KcxN5ZEUUaDGFheDGFhW:D2yyhkKYloRPuEUcxHZEUUe

    Score
    1/10
    • Target

      plugins/access/libimem_plugin.dll

    • Size

      30KB

    • MD5

      b0770c82314e94afd0d793774d66290b

    • SHA1

      79b280cda1ca944478ebad7778f642d415de523a

    • SHA256

      a5c2f2030e2cb70837d35e434d9793cafa04132e1823430ebcfbd4d985899637

    • SHA512

      21f4780a6da31c84fbc0fe117eef11cbd796d837b7fa38ec8c5e025c8b318f0b925775a7dec1e909ee14da77d800a01115758e803ddeb605e1da0ccbff047133

    • SSDEEP

      384:hfMDy/41Zo4M+7IXo8LPA2W9oPuyrPjvDGjoe0ghavDGjoe0ghs/:hb41m4t78xL439onDGFhMDGFhe

    Score
    1/10
    • Target

      plugins/audio_output/libdirectsound_plugin.dll

    • Size

      51KB

    • MD5

      077990f957556e8a72a37f0ee09a2083

    • SHA1

      371908e5515adb53a57f8d2bda47d59a7346fc1b

    • SHA256

      412f9ec13da17b2f2269567b8397b587352070ce77a641ae40b7a243e26c57ef

    • SHA512

      420d536532ccd474176e2ad2421e655708e0835faa1a60f9b2a70f8a54fdd8d787567c30f478639a367d913b5b34e4e0a81c1c38d95d14351affb25abc536770

    • SSDEEP

      768:htDcW2X9vjCOdZLae3hhwoOzHtdvQEarpDGFhcs3yDGFhed4:ht+X9vj/tJOYrVs1

    Score
    1/10
    • Target

      plugins/audio_output/libwasapi_plugin.dll

    • Size

      50KB

    • MD5

      d217e0144d8d9237d284a38f9c3e6340

    • SHA1

      fdf9f0edeecb0759fd8b502cd5314511e60f6347

    • SHA256

      94eb16ffd5526836c715d0a1eedada03f0a1061920cbfd44fd4daee3dfabd1af

    • SHA512

      22f7b1b05035011b95f3bf3f1ce4aeb43f8baaa8dde2f2d565dfbf83a9b0a00adaae9c941cd5a2ad4633444d9fe1410accb97a1dd16396afbe84679758738227

    • SSDEEP

      768:Ldd4RCuijvRJQ3liXsC0Fdk/1dLNR7cDGFhGDGFhtN:LHrQ3M4k3LbN

    Score
    1/10
    • Target

      plugins/codec/libavcodec_plugin.dll

    • Size

      15.0MB

    • MD5

      fad5798d2177993c88072f28581750e9

    • SHA1

      029bb1a51e948f649ed8af73bb54b99493b7e233

    • SHA256

      ab10e941252965e338b8b9351902c8eec98c71fa23dd431769a732ca109b5f22

    • SHA512

      def4e1de52122ed8826b46f00067bbd3420e2591bb854310aad05e2e4f01923dec5400ad242ce3e3a71ae344794688ebb084fa534ba50f946f2e6ad0d0649161

    • SSDEEP

      196608:mYci4iRQRGBBYqB0z6PLSEdEHq0BU4N22VrBnq6WT93f7xvMLbBZ4OflOfB62wss:pcK0BUj2VrX6wjA0/bsfXWpjf

    Score
    1/10
    • Target

      plugins/codec/libd3d11va_plugin.dll

    • Size

      267KB

    • MD5

      1137f05e3030ce4031dfa68731650f25

    • SHA1

      c1e78b9ad6c834d71b0f42ca0f4932f37b7b1579

    • SHA256

      c5cea8862585850e651cbcc5883c70ce7d54e1871b53905b210b55ed9bc1fab1

    • SHA512

      7b03d88f75a30cea02c766741550fb781f7a9a9472145558989e90cb8294f58d7104c79f94f2775fdb90edd38580d189816e63e56aa7c5f022e85d8bcab20a2c

    • SSDEEP

      3072:66Auodqwn3PeCVFB5D9vQh9elVlUfJ36XkGF16EuEt75P7gKwO:6puodqe3RH5pvQHelVlJk81rZt1zgKT

    Score
    1/10
    • Target

      plugins/libvlc.dll

    • Size

      172KB

    • MD5

      96214b94b796bffc48d63289854ae5a2

    • SHA1

      383bde4b3a861d47794aa4f03479a48c10a644dd

    • SHA256

      528c416cfb4813ee5f1da52743ef4adb20043171230098b27e25d1dd90e3f288

    • SHA512

      5243dd7153793ae33c3a25f2a92579c4e31813545680de9a0abab36e61d42655db4796a6f47606b47d6dce0d3f47754fd29fbfd18b973b029df0c543915750f3

    • SSDEEP

      3072:mZ6EqHx7iXIb/WmRJKn9llPMBq4tNyupwPU0sG0:mZ6E+x7iYiiMn9llP8q4tNyuusc0

    Score
    3/10
    • Target

      plugins/libvlccore.dll

    • Size

      2.6MB

    • MD5

      e25413bb41c2f239ffdd3569f76e74b0

    • SHA1

      073e2a86c5c24ede4c4ad2d8614261121a8d2661

    • SHA256

      9126d9abf91585456000fffd9336478e91b9ea07ed2a25806a4e2e0437f96d29

    • SHA512

      37b8339555dcf825a2e27464eb1d101f8e4b56460d1b78161e99ba6761f1a967668f11ba888a712c878d468f419a455dbc5e8e55e7fb9d4fbc87cb78f500ea9f

    • SSDEEP

      49152:hDWA3C12sNU/wEz2tMEjv9DZWtxfc1lVG3QNVBAUZLYasUpGaXBuQQ9umM:t3O2wEz2tMEj1lWtOrVG3QNVBAUZLX/

    Score
    3/10
    • Target

      plugins/video_output/libdirect3d11_plugin.dll

    • Size

      327KB

    • MD5

      267237343345265fe20a9688bd840de2

    • SHA1

      99fee276074a4671e2b5ccceeaf71ec951df45e5

    • SHA256

      0732c8978869bcbf11fa63f8cfbb5d6c75dfd8d34d176cae2dac99a261bcf2dd

    • SHA512

      e354a8c0ec8c32792b6c356dc519d41319684ea2d20d18b61e19eeb8133a049db93ac6845e9ca7978f2933be9bf37eb3f608b81277dc14e3d7d240b206392196

    • SSDEEP

      6144:bNQ3sPH66UG6wIt1YfZlfALhmUvzOFiFvxUg/G:bNQcPSt+fZlYLhmUvzOFgG

    Score
    1/10
    • Target

      plugins/video_output/libdirect3d9_plugin.dll

    • Size

      250KB

    • MD5

      f910aee501d6fe100096dcdf9bd4b525

    • SHA1

      c3aaf9ce5643695822cfa6935eefd4e39eaf3d14

    • SHA256

      77a79184b2c81da3b98d501632fc8e5c8af6d078dd29414ae693906f51c343aa

    • SHA512

      05fc6297fb44ef9e60cb975d941d98dd7bea9fbfea1e48723168725a887b1e1e8e00f97d8a5faf419039ee791c2f14404db61e65b40c767e17a1dcc2f6f84940

    • SSDEEP

      3072:9qmAgP5gT5jgwWmy3A66o3VgKtbYD+7xwy7SeHZOP8ATA5j7EfCUgTRXMPba8:Ym3BQj66o3VgKtb8kS6Oxy0CUgTRXMe8

    Score
    1/10
    • Target

      plugins/video_output/libdrawable_plugin.dll

    • Size

      30KB

    • MD5

      defb6d6c7bfbddafd3d48d47a69d47a8

    • SHA1

      787c35fa991694f54834d007c13646a219ba43e4

    • SHA256

      aa8cdd685be3ffecb848dd4264061536d562b784c473c3ad1abc1fc3527ac1f5

    • SHA512

      2284fdaec89b819b695db72c493f59b11d60eeab24450c500b0972ee097eae0e51578c0a3044ed100c8ea29e389e46183400ab17140407eebb86a418e04b005f

    • SSDEEP

      384:8SvFL5cokCvUip8Jp8kryYR5dhXveLvDGjoe0ghhH4vDGjoe0ghb:8G7bUHk4p5oDGFhUDGFhb

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks