General

  • Target

    file

  • Size

    311KB

  • Sample

    240220-dbtbbsad34

  • MD5

    41088a0a3df08b399802b0153e50bcf6

  • SHA1

    80930e2f3325c4f9e151853d7521b7a77d18ce6e

  • SHA256

    0fe996f5aa15b0a3a0e98490583af7f341f448e8af1bcdd35125204c4a76f5ec

  • SHA512

    627c663a205fe52cd8b86f5cfcaf220933801827ee51a891d4bbe82fa0f16fc47f327284870795fb40396e3e8fd9c31c4654fda1dcfc779ee141fdf727b6c2f5

  • SSDEEP

    3072:JiMgAkHnjP/Q6KSEy/oH8PaW+LN7DxRLlzglK9TQA:jgAkHnjP/QBSETcPCN7jB9TQA

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://combinethemepiggerygoj.site/api

Targets

    • Target

      file

    • Size

      311KB

    • MD5

      41088a0a3df08b399802b0153e50bcf6

    • SHA1

      80930e2f3325c4f9e151853d7521b7a77d18ce6e

    • SHA256

      0fe996f5aa15b0a3a0e98490583af7f341f448e8af1bcdd35125204c4a76f5ec

    • SHA512

      627c663a205fe52cd8b86f5cfcaf220933801827ee51a891d4bbe82fa0f16fc47f327284870795fb40396e3e8fd9c31c4654fda1dcfc779ee141fdf727b6c2f5

    • SSDEEP

      3072:JiMgAkHnjP/Q6KSEy/oH8PaW+LN7DxRLlzglK9TQA:jgAkHnjP/QBSETcPCN7jB9TQA

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks