General

  • Target

    launcher.exe

  • Size

    317KB

  • Sample

    240229-rbzd8sbg25

  • MD5

    70db445feb47de002a0119fd26ae2a64

  • SHA1

    f0c8d4f075685f3618546f80d276054a350e8b54

  • SHA256

    0ca0a61a2f1438de95ac448deece1b7214d8439b312c6046610e0631c8df89da

  • SHA512

    a665052c73a46d33b3da08876f98f67b671ba139d9b9a1d7964bed2ee7ceae7288db5a82fba976a67626a54c030318dee56087e16ababa358ff28c4fcbc97dca

  • SSDEEP

    6144:QuH5gN3upF6fC5WwZ++E7KnYQfsmf4UveB0DcHtXxKL0NeFnfrXok:0BfpwZJLnYiP4FdQL0NSok

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://technologyenterdo.shop/api

https://detectordiscusser.shop/api

https://turkeyunlikelyofw.shop/api

https://associationokeo.shop/api

Targets

    • Target

      launcher.exe

    • Size

      317KB

    • MD5

      70db445feb47de002a0119fd26ae2a64

    • SHA1

      f0c8d4f075685f3618546f80d276054a350e8b54

    • SHA256

      0ca0a61a2f1438de95ac448deece1b7214d8439b312c6046610e0631c8df89da

    • SHA512

      a665052c73a46d33b3da08876f98f67b671ba139d9b9a1d7964bed2ee7ceae7288db5a82fba976a67626a54c030318dee56087e16ababa358ff28c4fcbc97dca

    • SSDEEP

      6144:QuH5gN3upF6fC5WwZ++E7KnYQfsmf4UveB0DcHtXxKL0NeFnfrXok:0BfpwZJLnYiP4FdQL0NSok

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks