General

  • Target

    4192aa43222470b85bf310067be8166fca36222f95854913a30d2b1e16366e4e

  • Size

    5.2MB

  • Sample

    240407-v3sbsaac37

  • MD5

    b0f32e761bc550262a54034486dbee97

  • SHA1

    93b5ffa4138d571324c518242400c012c23ddaa4

  • SHA256

    4192aa43222470b85bf310067be8166fca36222f95854913a30d2b1e16366e4e

  • SHA512

    59ff29f6c813ccdf1125f4489f3f5313cd878ab08c721cb0d4f81ce81027c0b4bc950ac731299e87d22b97a30a7c440e2769e527ee668ef6f435f329878c1811

  • SSDEEP

    49152:nXVJmziU9ya3lgIku/1aPktLas5vAGnDEKqdM3l6kj+5E4fAU0HdYpsZe4gyyEkb:nrbE+Ik12asxp3oE4Ggytkb

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://appliedgrandyjuiw.shop/api

https://birdpenallitysydw.shop/api

https://cinemaclinicttanwk.shop/api

https://disagreemenywyws.shop/api

https://speedparticipatewo.shop/api

https://fixturewordbakewos.shop/api

https://colorprioritytubbew.shop/api

https://abuselinenaidwjuew.shop/api

https://methodgreenglassdatw.shop/api

Targets

    • Target

      4192aa43222470b85bf310067be8166fca36222f95854913a30d2b1e16366e4e

    • Size

      5.2MB

    • MD5

      b0f32e761bc550262a54034486dbee97

    • SHA1

      93b5ffa4138d571324c518242400c012c23ddaa4

    • SHA256

      4192aa43222470b85bf310067be8166fca36222f95854913a30d2b1e16366e4e

    • SHA512

      59ff29f6c813ccdf1125f4489f3f5313cd878ab08c721cb0d4f81ce81027c0b4bc950ac731299e87d22b97a30a7c440e2769e527ee668ef6f435f329878c1811

    • SSDEEP

      49152:nXVJmziU9ya3lgIku/1aPktLas5vAGnDEKqdM3l6kj+5E4fAU0HdYpsZe4gyyEkb:nrbE+Ik12asxp3oE4Ggytkb

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks