General

  • Target

    Launcher.zip

  • Size

    14.3MB

  • Sample

    240225-xq3yvsab59

  • MD5

    010a4aa53ca14c61c79d0cf56bdab965

  • SHA1

    02f741917a074e749412f04f0614e17e4e946bbe

  • SHA256

    a292f2677078f4cd40672254aaf0be2ff25583e69c0193ddc441f8ee01ece464

  • SHA512

    82bdd5a63d2eb22348b9710557e48b75d5f24f838fb50352473c13c5bd20344c090d58f96e08b6ee346346c1627e94d571c84088f2fcb71c610369fd937e13a3

  • SSDEEP

    393216:Jdk6EUP80p5qvDset8EH88LxrkadfHp9+5nY4L2I4K:JdkJgrHqvDs6/TkalJ96Y4LEK

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://technologyenterdo.shop/api

https://detectordiscusser.shop/api

https://turkeyunlikelyofw.shop/api

https://associationokeo.shop/api

Targets

    • Target

      Launcher.zip

    • Size

      14.3MB

    • MD5

      010a4aa53ca14c61c79d0cf56bdab965

    • SHA1

      02f741917a074e749412f04f0614e17e4e946bbe

    • SHA256

      a292f2677078f4cd40672254aaf0be2ff25583e69c0193ddc441f8ee01ece464

    • SHA512

      82bdd5a63d2eb22348b9710557e48b75d5f24f838fb50352473c13c5bd20344c090d58f96e08b6ee346346c1627e94d571c84088f2fcb71c610369fd937e13a3

    • SSDEEP

      393216:Jdk6EUP80p5qvDset8EH88LxrkadfHp9+5nY4L2I4K:JdkJgrHqvDs6/TkalJ96Y4LEK

    Score
    1/10
    • Target

      Launcher.exe

    • Size

      341KB

    • MD5

      89803b3847f66db20db68bcbcbb7584b

    • SHA1

      21a3c8176ebe9921eed19ac0437398408070ab6f

    • SHA256

      0f5c748b026f1c5187ac384b3e1c1d6cc0641ed5e4944b03ff11696babe12271

    • SHA512

      687a32a41a1c79dc0cb88869a5c7110e6ceb1114492e5705d7557a552f3f365536708eea6a62370b8c9a5d92e2d9bc17fde294ad2e3c0b2adc15926a99bb572e

    • SSDEEP

      6144:n7uKhtXc3o0rqUoHv69wDwmr9v7KxdiRb0EDzDstEK:n7u6tXcY0O/Hv69wcw74ib0EDzE

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

    • Target

      d3dcompiler_47.dll

    • Size

      4.7MB

    • MD5

      1e2f4329fa2e58be78f5fcde2aeea167

    • SHA1

      c2ecb4d0542c49d9e906d6173f77349aaa4749a6

    • SHA256

      a92f3bb1a4d846b38e8422d7c492f638e6bf47081facbb22c92568118938d5ce

    • SHA512

      8ae9b45f7427d83b5fd0afa49c920f79fc071f362dab0a4ef72be0fd19f5243779f071d762a66ffc2180121ded618e571470d3eabbdcf21b4125cf0b04ea62f3

    • SSDEEP

      49152:3uhjwXkKcimPVqB4faGCMhGNYYpQVTxx6k/ftO4w6FXKpOD21pLeXvZCoFwI8ccG:ny904wYbZCoOI85oyIV

    Score
    1/10
    • Target

      libG1LESv2.dll

    • Size

      142KB

    • MD5

      b5505f1a0d0b678dd1198591bc74bc3a

    • SHA1

      4312c487599c49bc53e2d83ca34561ac3b79b729

    • SHA256

      08b34f11661de9e838ecd8fdf2780117e6b5e83edf24f5dcfae823a7e1fbfdd1

    • SHA512

      804ebb36d26f4362f03c31071905b8da41cd0318d10fa9e1fcab191438afc4d7f79d2f6bc6fea2dd45073929b88a3bf467f9d3cc63f703a1909cc089a291853f

    • SSDEEP

      3072:YZ8y3Lm1TcmyZ8y3Lm1TcmyZ8y3Lm1TcmyZ8y3Lm1Tcmt:GZ/Z/Z/ZI

    Score
    1/10
    • Target

      locales/bg.pak

    • Size

      608KB

    • MD5

      96372403a9ded96f3a699262029a4580

    • SHA1

      07069b20fe303f6eef1fb6c8c0a19266a0c705c9

    • SHA256

      6c10b64d31e0dc2c4befc6703ac17343ca473b4350cfb3c6e01833f505b69590

    • SHA512

      0df60fe13818f0c3c6838e77686c5de9fa03b97cbf0943f7a2a4ae2f3a0890d3d64b3a7652d8c81c23de876ac92e4c6b71d584fb106c3520c96ef76ba30250fd

    • SSDEEP

      12288:dPnB1xlYrdAs1alUDpzaVVwsl867mFyY3SKN3rsbDxXs7Jfu64KGzrFSZp8VqJ5O:dvBjlYrdAs1alUFTsWoY3SKIVcdu6pGB

    Score
    3/10
    • Target

      locales/bn.pak

    • Size

      780KB

    • MD5

      cb203032925be270222dc2c20fe771e2

    • SHA1

      2f2f20bbbd07ee01cc996247bd9c2f40037dff80

    • SHA256

      297d52b252df0912490ddf26fa58706895e70c2a0f3f09d0dc756706720095ef

    • SHA512

      052be75c51051949c84216566b462733b61026ba74e212b000cbed7d93cb852e74ae83d64d2eaadc3093af4265b6783184cf8e0368a75e077d4b75daba40f9b4

    • SSDEEP

      3072:Kw+ZjJj+E7z0eC6HcvR1kgBbdawSU5ZwXll4:4tJXZ78vRNBbdz5ily

    Score
    3/10
    • Target

      locales/ca.pak

    • Size

      371KB

    • MD5

      de21c7d001b771d4d59e2acfdd67dd44

    • SHA1

      ef5870e9cf34416edbec6aa76a6feb77b70b9acf

    • SHA256

      78bbee9bf6c95d239418037fd4660d081ebc0f369e727e613b6b652e380e6dd0

    • SHA512

      3276a84a4b4d90b47789a7ce6a3ae34afec187145a438fbdb7f398152b182e97ba10acda4941456ea2387c03c101bc2b1716a8950897ea3be180b3d8c073902e

    • SSDEEP

      6144:moaCg6EDiYqdSIs3cehEYBC2l3nbh9aGHQl2SwAGwXZM0dLbpuQRBtryBocaGIlI:Hg6EO9dSIs3cehEYBC2l3nbh9aGHQl2t

    Score
    3/10
    • Target

      locales/da.pak

    • Size

      342KB

    • MD5

      f3a47e259c59de0aabef03e6b5a263ca

    • SHA1

      c45bd961c8bb84331d652f4399675b365f5dfe23

    • SHA256

      13c9583127d9d723801c946039e60f72dbbde898dd23fb9f675b9e299d0ce72a

    • SHA512

      4249456e572403249580905f1b4b4471b6a8d84c6c71201c42adc862d4e0d33f957ae1057109e900a10a029a8dfc45257b0e0e283ad9eca21a30498a0795eff2

    • SSDEEP

      6144:eAzv/f19wl6qKJwRXFGZO2Z5nYryGzOWi05TWwc:5H9IF85Yr5T0

    Score
    3/10
    • Target

      locales/de.pak

    • Size

      367KB

    • MD5

      cfc9d90273c31ccf66d81739aa76306a

    • SHA1

      ecab570041654b147b3dd118829e2f7ae668f840

    • SHA256

      8bd127d689be65e45bb8d2a2ff66698200da97835809c6b56ec9e2929b70618a

    • SHA512

      c9a5058b34c4045ff1b7ae25f1f47bff14d06b3a97b7b1f30da65618ca7aeb0638d79f4e1cea4773cd92d9dfa7f9d2203e5734d0cfe11ee2d2a460d6cec18380

    • SSDEEP

      6144:F+QNkAjzYyqSFaPjON3Be0mzBWCj0Xs5HgIxBI0gql:cQLjMyvFaCN3mzBd5xy0gql

    Score
    1/10
    • Target

      locales/el.pak

    • Size

      664KB

    • MD5

      8f5a15560710db2af852512b7298b93e

    • SHA1

      30a13ebef10108effbad8c24b680228660658415

    • SHA256

      bc07e403272a4d65305fe24a827404d7b931d01cda547f8c07a840d19e591430

    • SHA512

      e3cedc0eaa82b10a68a40aca8ec1379a6bb924766e1c5abd97e39c621dcbc195d6c1ff80921c2320f0f1c87d160bc2a6258108399876339e5104f98d90a861de

    • SSDEEP

      12288:RdquNwK202pgaZH4q5OaPY3HvO9K63/fgBsbfFnxHuhWTT9rkv0pfBtMMkffFZig:RdquNwK202pgaWqsaA3Hm9K63/fgBs9I

    Score
    3/10
    • Target

      locales/en-GB.pak

    • Size

      299KB

    • MD5

      05ac84aa6987eb1f55021b6fba56d364

    • SHA1

      58cb66bba3af0c6cc742488ccc342d33fc118660

    • SHA256

      e1e357c853eed83fb6c4133f8f4df377a8eda4fe6f0e55395f21c5ab6e38faa8

    • SHA512

      c615e1eb01412c5e2c0402242d442a6cf08965318d1c0d261ca5bc6df9acba5efa2c87ade20e1e4740d2239ea56d1ce4d3fc7a4c3eabe81b876ecb364b3e91b6

    • SSDEEP

      6144:WJeP/KOb6vG8GGvDJAgdMP9ectcaAfaYEnG2J05SSvqo:1COb6ugdMrcarnGf5SSio

    Score
    3/10
    • Target

      locales/en-US.pak

    • Size

      302KB

    • MD5

      3fef69b20e6f9599e9c2369398e571c0

    • SHA1

      92be2b65b62938e6426ab333c82d70d337666784

    • SHA256

      a99bd31907bbdc12bdfbff7b9da6ddd850c273f3a6ece64ee8d1d9b6ef0c501c

    • SHA512

      3057edfb719c07972fd230514ac5e02f88b04c72356fa4a5e5291677dcbab03297942d5ecdc62c8e58d0088aed4d6ea53806c01f0ea622942feb06584241ad2d

    • SSDEEP

      6144:yoaiWmH9xPN6DacNMP9elahdQfaYejDJDsN5ySMZswS:taiWF+cNMbhd7jDJi5ySEswS

    Score
    3/10
    • Target

      locales/es-419.pak

    • Size

      366KB

    • MD5

      13c6d0a268545541f325375d431b41ae

    • SHA1

      5f5c41348f00c5e5539d261c2b76ae6e3ec7af83

    • SHA256

      943fa8774ade38d57349a5d27869097a782bc06bd34c40864a85ba829457d127

    • SHA512

      09cbb2b21304ca8afa8b760b738adb5422e83550085f1aed8e8590eeef04a2b0e131e1ead6723c3e85383630c483d7720e55f71305ff4821d7822fe6d7aa4252

    • SSDEEP

      3072:rt+uPUzEx0HrKJBjQMU0dmdv5jrqMCOyu0sdzPh7buhwwJ3Os57lLfGLFg3WSszj:rt+o+I0H6nUxv5rYQQJH5sLFg3WSsTG6

    Score
    3/10
    • Target

      locales/es.pak

    • Size

      367KB

    • MD5

      c8086dc25cf0a3c978b2c3b37edf8d67

    • SHA1

      7b6d2ce8b3cc5a33ab2bcd23114fe65ccc568e7a

    • SHA256

      11ef2c0229c1fe1c10be08e3d5f36c973bc3c272f37b40e05c534a118757461b

    • SHA512

      230e6999a6fea1df3b2708eb331a2c25ca53677b3453745ff9cc7fbbc013b69148af5609166720255a2db7e63b25e2d0c599fb07057a6b47bf61f63ea9db9e01

    • SSDEEP

      6144:OYkS2J1Bc2UoWCfgfr56ZLb5R7q5zrB7bUlo4AN6PZmz:OYl2XWn5r0pFRm5zreloXnz

    Score
    3/10
    • Target

      locales/et.pak

    • Size

      330KB

    • MD5

      054865950b3b9e8312a7f9490268eaca

    • SHA1

      28b0176112eddb7af58386b4f8aed4a49b9a2661

    • SHA256

      3599e7138a24a31839da877cc9718b9c0c9522437ea93a6222a119080f108d14

    • SHA512

      bfc72f19ad1a52c0da82409accb33a27b2844ed29010207268c7d695ad7562a8867a87b70ac50142909b50b81a5c84d6f6a43968353ae7a72bc042aea8cbb59f

    • SSDEEP

      6144:GPJXg42WkHwGkDmzZpDM0djry2zuJbT/RcLvihV15Ujc43ceLfLPQu:6JuvymrDbWF15Ujf

    Score
    3/10
    • Target

      locales/fa.pak

    • Size

      535KB

    • MD5

      c27431f2de37b9643b83e383f7eae5a8

    • SHA1

      16d068d9738e1aa9b94658299a4eac3972520864

    • SHA256

      bb28ad47e95aefaa2d8d7b6a7f449f9707cfadbcd4c21bad8bd8a6578108d2cd

    • SHA512

      4ccc46dc7756ea0e60e6d278bcac1262a54ba03742fd0eb4d9f1f962486394fa56491844871dacb4cb0501c6f594334d3f23f3db82bfdfa1f938e1ae609d6600

    • SSDEEP

      12288:aGz43DX9nuya1jfwHLwNUaGSSfStQvueKT+JwMTAKzIxRAQiHedNu3htodxWetlh:aF3luya1jfwrwNUaGSSfStQvueKT+Jw7

    Score
    3/10
    • Target

      locales/fi.pak

    • Size

      338KB

    • MD5

      aac0554a39bb1ae91e2ed4246e04c30e

    • SHA1

      031785024765eda1534fd9504eccbe1b471ae618

    • SHA256

      df8cefa4831fc2fdf817dd6d49a6373edee4f51f23cf990c690e72ce348f69bb

    • SHA512

      a6afc9464047c75157dcb8ece086c1c5bf4dccb48d33da24e35c43110f300cfea503c4cca093f3d4bcc7a0fdcb306138da5be288ef646881b625751e40d93689

    • SSDEEP

      6144:3pR/2jxpvwhnVgQsm3aOE/8aCEELsR5w5jSH4EJ18GWU/8nZRuX1wr2:vOnvoG8a35w5+H4EJ18GWU/o2

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks