General

  • Target

    13ba54cd51054b82cc24cb5dfbdc1256

  • Size

    3.9MB

  • Sample

    240311-h4v3vafb9s

  • MD5

    13ba54cd51054b82cc24cb5dfbdc1256

  • SHA1

    94ef4fad3c22b764fd6dc5a90490ca07aec25401

  • SHA256

    d160705c870ec3a76eb6626440d20a0101b972149561c6f27ef5e7f0958ce1a3

  • SHA512

    703141ed1a5999806810cc224c907dfef4f9570226205ba68b34d2d2334b3618bafa2a5bcb1cea012d77f2d222a23cb920c11cfc59a71e118f81fddfa5af3c8f

  • SSDEEP

    98304:iuSkCqdCgvipkZezOcuNLxZOVogKAEYOe/t9nQsc4KxqzEqw:i1dqdWdzVMxonAYOeDnpc46Nt

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://associationokeo.shop/api

Targets

    • Target

      13ba54cd51054b82cc24cb5dfbdc1256

    • Size

      3.9MB

    • MD5

      13ba54cd51054b82cc24cb5dfbdc1256

    • SHA1

      94ef4fad3c22b764fd6dc5a90490ca07aec25401

    • SHA256

      d160705c870ec3a76eb6626440d20a0101b972149561c6f27ef5e7f0958ce1a3

    • SHA512

      703141ed1a5999806810cc224c907dfef4f9570226205ba68b34d2d2334b3618bafa2a5bcb1cea012d77f2d222a23cb920c11cfc59a71e118f81fddfa5af3c8f

    • SSDEEP

      98304:iuSkCqdCgvipkZezOcuNLxZOVogKAEYOe/t9nQsc4KxqzEqw:i1dqdWdzVMxonAYOeDnpc46Nt

    Score
    10/10
    • Detect ZGRat V1

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • ZGRat

      ZGRat is remote access trojan written in C#.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks