General

  • Target

    feb071c8537cd643bc31d36b4728396b.exe

  • Size

    6.1MB

  • Sample

    240313-n2axsacc8v

  • MD5

    feb071c8537cd643bc31d36b4728396b

  • SHA1

    c3df5098a0bdef492b5767f2df5bba375782a029

  • SHA256

    96cfe1f8439e918428f1c8a3f05b4b1d7c6273a6588eef884647b9657e421d3a

  • SHA512

    953f7f913e0d4dbbff3c87de912950e6aafb4fbea710298dc38d4fc9b30c171e0d07f7a043e17d5480c87f77cae69fc140df47c4cb5921f2e5683e31b3811b4c

  • SSDEEP

    98304:8FB+nSX4sEpIwmfGvMeTwus8SwW3XWZuJrtW:c22uIXS0vX7W

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://scandalbasketballoe.shop/api

https://wisemassiveharmonious.shop/api

https://colorfulequalugliess.shop/api

https://relevantvoicelesskw.shop/api

https://associationokeo.shop/api

Targets

    • Target

      feb071c8537cd643bc31d36b4728396b.exe

    • Size

      6.1MB

    • MD5

      feb071c8537cd643bc31d36b4728396b

    • SHA1

      c3df5098a0bdef492b5767f2df5bba375782a029

    • SHA256

      96cfe1f8439e918428f1c8a3f05b4b1d7c6273a6588eef884647b9657e421d3a

    • SHA512

      953f7f913e0d4dbbff3c87de912950e6aafb4fbea710298dc38d4fc9b30c171e0d07f7a043e17d5480c87f77cae69fc140df47c4cb5921f2e5683e31b3811b4c

    • SSDEEP

      98304:8FB+nSX4sEpIwmfGvMeTwus8SwW3XWZuJrtW:c22uIXS0vX7W

    Score
    10/10
    • Detect ZGRat V1

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • ZGRat

      ZGRat is remote access trojan written in C#.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks