General

  • Target

    Roblox cheat.zip

  • Size

    20.0MB

  • Sample

    240225-zxt1mscc92

  • MD5

    681f84e805ca6d338524f26cb4c8c51b

  • SHA1

    ae0af6d9fce46bbb8986b5321b983ca2da567561

  • SHA256

    d9eaa3d245a8d717ff2e9bf0df0c0777ad144e2db2425aca44300b9997b93a32

  • SHA512

    b877ac7ed87b4de35067d41e25d183796429a7397b24f6a311672a3fb42e229396feaec94ac31f208686b7e5fe893dc2a4b42c29b18f43bc95ec1840ed1e572c

  • SSDEEP

    393216:eeoNtRjsFsXjUVETd+iB9dIx5C/jt/3mOHLd4RFf4tvPQ5PPIpkuIZaocsNihZWj:ettsMjUOVBLJQOrIfaQGpklZaDsifG

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://technologyenterdo.shop/api

https://detectordiscusser.shop/api

https://turkeyunlikelyofw.shop/api

https://associationokeo.shop/api

Targets

    • Target

      Roblox cheat.zip

    • Size

      20.0MB

    • MD5

      681f84e805ca6d338524f26cb4c8c51b

    • SHA1

      ae0af6d9fce46bbb8986b5321b983ca2da567561

    • SHA256

      d9eaa3d245a8d717ff2e9bf0df0c0777ad144e2db2425aca44300b9997b93a32

    • SHA512

      b877ac7ed87b4de35067d41e25d183796429a7397b24f6a311672a3fb42e229396feaec94ac31f208686b7e5fe893dc2a4b42c29b18f43bc95ec1840ed1e572c

    • SSDEEP

      393216:eeoNtRjsFsXjUVETd+iB9dIx5C/jt/3mOHLd4RFf4tvPQ5PPIpkuIZaocsNihZWj:ettsMjUOVBLJQOrIfaQGpklZaDsifG

    Score
    1/10
    • Target

      Qt5Network.dll

    • Size

      1.3MB

    • MD5

      c24c89879410889df656e3a961c59bcc

    • SHA1

      25a9e4e545e86b0a5fe14ee0147746667892fabd

    • SHA256

      739bedcfc8eb860927eb2057474be5b39518aaaa6703f9f85307a432fa1f236e

    • SHA512

      0542c431049e4fd40619579062d206396bef2f6dadadbf9294619c918b9e6c96634dcd404b78c6045974295126ec35dd842c6ec8f42279d9598b57a751cd0034

    • SSDEEP

      24576:HO51NG2bq1mhQpCR4SSUVxiKZiva+su3pUlSuMEFR+PoT0lqU:34hQoRpSUVYKZqvsu3pUlNMEePoT0E

    Score
    1/10
    • Target

      Qt5Positioning.dll

    • Size

      319KB

    • MD5

      fb45f544d61c6a0a66e7ad3f5c0508b1

    • SHA1

      50331a21dd2db624a559fa7ec5d3a0d93b8944ae

    • SHA256

      e42297b688986f0e6dba17ae82a5d78cba1139bc03a0c30fbb6a6ef6c7f557ca

    • SHA512

      3419f317f34f29996e8e139fe1725c9568bb262ab895a110be925b324fa3703e9a61a29e19b0b18e36cce31008353b9a9f80064b90aac7c16b05f544749e243a

    • SSDEEP

      6144:zL3H526yykA6d0DbxzdMJ6EXmD2AOoLf:v3HWBo4J6W

    Score
    1/10
    • Target

      Qt5PrintSupport.dll

    • Size

      312KB

    • MD5

      dbf79abfb2fe2490fddfcc5b142326b9

    • SHA1

      8955c5169f62b643a53920607c1392c049d180c2

    • SHA256

      a4869f741088c67a0b449edad15658a9cf1edd8b693e4b23b6172952b6a7f9bf

    • SHA512

      424ff210400a77876fdc6eb87ca245bb475151ebf2656a5e36ee77fe27ff4cbb5f30cd608a0cdf5113fffcaa00398de2e758a1721e7154585a230e53981b6051

    • SSDEEP

      6144:SU6GcHAzLDN8xBznXwgUA2GqWss4A+1gr7pGZmSUbZqXxtUPIsq5okoibIWBk7fB:F6zqLDN8v

    Score
    1/10
    • Target

      Qt5Qml.dll

    • Size

      3.6MB

    • MD5

      27e0d9b1fd02d19a8745459bd729926f

    • SHA1

      fee35bd148db2a9eb410f3c8f5c9a216be0d6d18

    • SHA256

      53e8fecd7d4b1b74064eba9bfa6a361d52929f440954931b4ba65615148bf0ea

    • SHA512

      aef0caeff970629a6cce00766139a407ac8e7c1179e5dbac1e01e252725f25a6fa771a7bb0cdcb894394b1ee7cff323511fb1eb64901d0c959fe2203d132ecc6

    • SSDEEP

      98304:9myruPbjj6ODMIuT/IRhF/dNjnvkHrNrSdSG779LLLS/o/L4YqoY0Xba+mRR+:9druTjj6ODMIuT/IRhF/dNjnvk

    Score
    1/10
    • Target

      Qt5QmlModels.dll

    • Size

      430KB

    • MD5

      51addd243d4acbf6e2704b207dfe40b2

    • SHA1

      acbc43b8480c1d8884d1b096d66a2ed678318b06

    • SHA256

      1ac4753056179b358132c55ca3086d550849ae30259ba94f334826c2fbf6c57e

    • SHA512

      c8aec4b704ee70bef16c71b1aded727e3a289831c4cc8f3cb276813e3f2ea1d96f3ff8529dee5ead46eb889206b4a3b4d2e468827fa833831ac69f43cc797064

    • SSDEEP

      6144:s/VXP0g95T6gCk3Ud7Bz+vccX+Wl+tmYZ2u8ruxJM:s/j95TfBI4h7FuL

    Score
    1/10
    • Target

      Qt5QmlWorkerScript.dll

    • Size

      53KB

    • MD5

      b1355f6f2e317a7c47c7179c1d48f407

    • SHA1

      db7fab191779a9fcc90710da7ece693d55e6feff

    • SHA256

      5c3150972603c07290cf8dcfa7e6d850abb6a1d15f3f1c42d8bdac8623f1a148

    • SHA512

      c0a22ef0abd17c29199960ffd1c2de65a007bd2616f988451dfe88f48ee4a15e0fe3cb4360d3783f8d2c5acd6026f130cb22e0837fdd04ef5f433d3d7a0b6951

    • SSDEEP

      768:PnzAEqsfHbF+RC/q1TXydoz2esnQgSCod1GwvwuZG4B:PnuKMRHlaeYQCPewuZzB

    Score
    1/10
    • Target

      Qt5Quick.dll

    • Size

      4.1MB

    • MD5

      1318935680b9b9771e1e4c80fa97fbd4

    • SHA1

      e3c8efc59866b68f6e28c163fbaebd24e3dd24d2

    • SHA256

      553451008520a5f0110d84192cba40208fb001c27454f946e85e6fb2e6553292

    • SHA512

      678e4678fcdaf09f8d5ad5f869941f511ba5440ab7cac8e0693f20e16bca09095ccc49325fff2ba0db56df6e4c751a273aec13ccb49e703909efc6ca96f6ab6e

    • SSDEEP

      49152:/HyNQTBKx8buUfPkOTSvvJjw8snmD1OMbSMO/cx1BCHYBQvFEUxKJ:/SY37nSE9EXk

    Score
    1/10
    • Target

      Qt5QuickControls2.dll

    • Size

      167KB

    • MD5

      60217140ebbd4fe3d430d09505928d45

    • SHA1

      df65388f808c5f6f24e4d320ff7a03db1d1df5ad

    • SHA256

      dd30ade18125471c8700ba01cfb54e85570c0f365e969717bc0ba6ee8199e242

    • SHA512

      8e2ae344145531f03db3a7d916d6e6e85edf7c34778c97f9361455fc12ec013f828a9634abb7f293e548dd9be5c45e9d637d7ecfc10624138476c7eaec532b87

    • SSDEEP

      3072:9yh+Y6ksWf73lmYPgnmdtKS6Kum9HcJPbISsvdwtCDE/:9yh+Y6ksQ3lWKum98FbISsvdwtC

    Score
    1/10
    • Target

      SoftWare.exe

    • Size

      307KB

    • MD5

      32f9efeb30fa01836bb8cfe520f14861

    • SHA1

      58c8d341b5ec582a42db7e03cd9ac5bbaa343e49

    • SHA256

      818355212f6b1af793992b808847c1f8bd3ec359ac2ecb378bf9ff6e449ae176

    • SHA512

      d2ea3fae32ec055f743143165a101dcecf7139aaf150bcab4ffaf3842e3f5662f9cfeb43d0d77faf935e2fb58f3e280e391acf761186b75ecdc6b3f5c9dad4d6

    • SSDEEP

      6144:yjP/7/EXAa+qqEPTeOKxE7TWOjWhWFBEIIhqnyj4vPx1nGxqmH4SNia:yjP/7EV3fPTeOmE7THjWhiEdhqnyMGwW

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

    • Target

      ffmpeg.dll

    • Size

      2.6MB

    • MD5

      2fc7f6b0abd1af4988e30e58e8310291

    • SHA1

      9d553d0ca4f13bf2ce07d850344cb1ca70bea0a6

    • SHA256

      b08a720802c6dc662247e52658499ce9f87211e0d88343fb0326a1ce9abc5e8b

    • SHA512

      cdcad781dae26a565fe07dec861c5f47a0861e308a275da529aadc9f4dd03778b40ba8b9e8b7cc3042b7d543cef6ec38f8e79761a7d6c5fe639872ed23d799c2

    • SSDEEP

      49152:A14LZeiXTFI6vTD9MxCAJ0qsOw0FZnHzKedVLes+/EnvIS:V7hMxjk0vB

    Score
    1/10
    • Target

      icudtl.dat

    • Size

      9.7MB

    • MD5

      224ba45e00bbbb237b34f0facbb550bf

    • SHA1

      1b0f81da88149d9c610a8edf55f8f12a87ca67de

    • SHA256

      8dee674ccd2387c14f01b746779c104e383d57b36c2bdc8e419c470a3d5ffadc

    • SHA512

      c04d271288dd2eff89d91e31829586706eba95ffbab0b75c2d202a4037e66a4e2205e8a37ecf15116302c51239b1826064ed4670a3346439470b260aba0ea784

    • SSDEEP

      196608:GEGwSv9AAQ48yTliXUxR0rHa93WhlU6tgYLu:G4KlQ4xliXUxR0rHa93WhlU6tgYC

    Score
    3/10
    • Target

      libEGL.dll

    • Size

      431KB

    • MD5

      1ed91477a02e0e2a64e5e9f26bcea438

    • SHA1

      8058c2bd3342d8d882768188b1e5c45567a8dde9

    • SHA256

      a1267343e2ff9f9603627c0520e6cdd8e4a67fba041146e8def6a43e334a4e03

    • SHA512

      c80ace4df62ccde9699cafaffae290cb9ab83dc5db5fed6483aadea0f6389eaab8cc44f8cfde43aa980307a6f357d51c406fa267293135def1eee5378d0960a5

    • SSDEEP

      6144:gbSSlxpHPDSDwFRSHXEU4alu73cwp1MmJw7r2qVmTsR6Lbg3y:q9lxdPewF43EDaG+0TP3g3

    Score
    1/10
    • Target

      libGLESv2.dll

    • Size

      7.5MB

    • MD5

      640a515fcd8e5d5a332c1d40c47700b0

    • SHA1

      0128c9d499deb7866f3d7aae0adab69d9a8f768f

    • SHA256

      927c858deb4700d3759fab436d5ba554ff4cf7be505d536ea1c673707d5ca8a1

    • SHA512

      792acebb5ba329e61bc319b415ba01248dcf18c7e46695222682dbf59d179403ced15c19ae03a282dec7e622121c05844d8eae5a04a2aa1f552ebced51644e27

    • SSDEEP

      49152:cHYVf3vXozSZVwq1ZET78U9t9Ib7P4jN0gVkel0hZecqjXFArFFiKMTvrd5/Lln+:DWD0Ue/elpegxsgPRPV+fJJ7od0m

    Score
    1/10
    • Target

      manual/Manual.txt

    • Size

      299B

    • MD5

      a9d54b587566bb7b7ceeaa7cbfe6f396

    • SHA1

      3cb341458c105fcd18a512e33dcc6645f949854f

    • SHA256

      b56e2655ddb3963fab4d23320a291da99b5cd8280943ae359d695004dad38bd8

    • SHA512

      179f0224faeed52a1eb660cc1043036994408db01cc292f9505f190f00a826a584831f359f4b1d269cd13f2bf38c0e282d5e55e9418fa46f68002ac37bb26706

    Score
    1/10
    • Target

      settings/cef_100_percent.pak

    • Size

      261KB

    • MD5

      b84d20e51dc7b971c7ab2502e3843f1f

    • SHA1

      ed87bd499cae74a748e03fc33c36476a20487b78

    • SHA256

      62d84df6c05bc41086aef1caff5b2db9cacd18535cb64407e79b715baa316b17

    • SHA512

      1dcf7ff2cd92708892a43fb6cb9df5b46c1f98c49b7f58dc915b31dcaa27323d9055754173005b16581e74add695b62fa096890a40e3a2ee42ddb11a785920d5

    • SSDEEP

      6144:FIYS+PehTgH+a6S9zwV5TrOHCZ3x5c1YC7x10fSucY7OP2ITQ:FIGeb1Ngf1d/dQ

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks