Overview

overview

10

Static

static

7

LeanC2-main.zip

windows7-x64

1

LeanC2-main.zip

windows10-2004-x64

1

LeanC2-mai...rk.dll

windows7-x64

1

LeanC2-mai...rk.dll

windows10-2004-x64

1

LeanC2-mai...ys.dll

windows7-x64

1

LeanC2-mai...ys.dll

windows10-2004-x64

1

LeanC2-mai...64.dll

windows7-x64

1

LeanC2-mai...64.dll

windows10-2004-x64

1

LeanC2-mai...tm.dll

windows7-x64

1

LeanC2-mai...tm.dll

windows10-2004-x64

1

LeanC2-mai...C2.exe

windows7-x64

3

LeanC2-mai...C2.exe

windows10-2004-x64

10

LeanC2-mai...PS.dll

windows7-x64

1

LeanC2-mai...PS.dll

windows10-2004-x64

1

LeanC2-mai...ts.dll

windows7-x64

1

LeanC2-mai...ts.dll

windows10-2004-x64

1

LeanC2-mai...ts.pdb

windows7-x64

3

LeanC2-mai...ts.pdb

windows10-2004-x64

3

LeanC2-main/README.md

windows7-x64

3

LeanC2-main/README.md

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    LeanC2-main.zip

  • Size

    6.7MB

  • Sample

    240416-m9nyyaaf7v

  • MD5

    45366b3efe5553afb15af3562b6a5b87

  • SHA1

    0e5cdc07ba219c82883dfd8789e169ea912ef848

  • SHA256

    649a295b0b2bcaf81e1c197dda1a2e41cc9de861b2ea99dde507cad09d0ea938

  • SHA512

    f470f950834f128692317939f20efb5ca2789cba9183143e712ef5d92f0cf30613d32acb9042be05dd6afca6d3c476cb89208c605dc449599f3b4d040e7fc330

  • SSDEEP

    196608:nq2Comj5bpXRCX2Xmb8jYYr3t/WaRbfUogncc8yQ:OlNXRW2XOWvrd/WaRDUo3pyQ

Score
10/10
lummaagilenetstealer

Malware Config

Extracted

Family

lumma

C2

https://cleartotalfisherwo.shop/api

https://worryfillvolcawoi.shop/api

https://enthusiasimtitleow.shop/api

https://dismissalcylinderhostw.shop/api

https://affordcharmcropwo.shop/api

https://diskretainvigorousiw.shop/api

https://communicationgenerwo.shop/api

https://pillowbrocccolipe.shop/api

Targets

    • Target

      LeanC2-main.zip

    • Size

      6.7MB

    • MD5

      45366b3efe5553afb15af3562b6a5b87

    • SHA1

      0e5cdc07ba219c82883dfd8789e169ea912ef848

    • SHA256

      649a295b0b2bcaf81e1c197dda1a2e41cc9de861b2ea99dde507cad09d0ea938

    • SHA512

      f470f950834f128692317939f20efb5ca2789cba9183143e712ef5d92f0cf30613d32acb9042be05dd6afca6d3c476cb89208c605dc449599f3b4d040e7fc330

    • SSDEEP

      196608:nq2Comj5bpXRCX2Xmb8jYYr3t/WaRbfUogncc8yQ:OlNXRW2XOWvrd/WaRDUo3pyQ

    Score
    1/10
    behavioral1behavioral2

    • Target

      LeanC2-main/DrakeUI.Framework.dll

    • Size

      1.6MB

    • MD5

      0562b4c97f643306df491a938ae636da

    • SHA1

      0807c37b711374ed4814a9518c9e264517de89a0

    • SHA256

      70e72477f7fe0018e043ce8fe2228a289459058ee41caecd6f05855898bc5b80

    • SHA512

      c969cd274b6bf65a34f1d129b6531616a3485a1f153088609ad2369d380fdec37c3e88a423495912715a26e353dd5498f7f9e73c895e9f3f18fc7d1e65d2ecaf

    • SSDEEP

      24576:nYyUyUxws47SDJ+wfa3ZsacYwzhmT5LOMobxqFFnM9Pv1w+Fus:nYyUyUueD001YwzhmVSMoNqFF

    Score
    1/10
    behavioral3behavioral4

    • Target

      LeanC2-main/GeoIPCitys.dll

    • Size

      191KB

    • MD5

      c070f2421851420e832e4f5989a775a2

    • SHA1

      d6af3c48ffbe0fa1e0e54860836d3bbf374b8b46

    • SHA256

      d54fd6c5903eea49a75d620d4ba232f8effb1863f5f9c974e4ac0a8fb1904131

    • SHA512

      75c3edeb4c16d8e82eedc5595b9c3fde4cbd4a3e9deae1967ad513474920a48e4e9275fdc76f44032b1be570a4ece1a6393c4680af8989f67bcdec039d06798e

    • SSDEEP

      3072:87IcHKc0TwY4O6BlLiJxTmd9h1+fJ5uJnjpUoh/ht21hYvpMaoySJHPc8E:8dHV0Tn4pox6d9G4k

    Score
    1/10
    behavioral5behavioral6

    • Target

      LeanC2-main/HVMRun64.dll

    • Size

      4.3MB

    • MD5

      21184c4444b13c67546c7acf7f6ad8e3

    • SHA1

      806fb111900a0ec8bee1f658c6828b9e005f1111

    • SHA256

      14f61c269509eb27083883d5e8edcf9ed14f3b62cfbfb69f4f7434d64a7fa924

    • SHA512

      9c55f71051f7c83d8644c7eaf500a5ea887aa75886480fcb607e3540f482afde0cc11396e3c2be936bd6418ce76a752132391c97b2620927a9a694eee99380eb

    • SSDEEP

      98304:1JArZsVn2qEP6Z5AF8qRHNKs9KtEXMURNZpe5:o0tkY5sHh9FMURN

    Score
    1/10
    behavioral7behavioral8

    • Target

      LeanC2-main/HVMRuntm.dll

    • Size

      2.2MB

    • MD5

      559f1a94d4fadbe42745200c5deeb94c

    • SHA1

      606e336a95c22d0a5bd260af68a3321a284a7270

    • SHA256

      52cf690f3436c9e98a2ab13e2871ca95da72c34ea5dd36d5c52ecccfa78b5696

    • SHA512

      49b85d97f32322cac68c811c7f0268b6d0a71f2dc4428281d724aab0355544da4b33aebffe72e5b92d0b024e40c29392bade4eec2f00c98a46a44eb3e1e547fa

    • SSDEEP

      49152:eX8t9RJHZ9rXOjClE3xNP8AHn9yHyS4LdR1eFcDmoFwHqM9iJ4YI:eMttZVOG237PwSS4BfZDmCwKMs1

    Score
    1/10
    behavioral10behavioral9

    • Target

      LeanC2-main/LeanC2.exe

    • Size

      490KB

    • MD5

      9c9245810bad661af3d6efec543d34fd

    • SHA1

      93e4f301156d120a87fe2c4be3aaa28b9dfd1a8d

    • SHA256

      f5f14b9073f86da926a8ed319b3289b893442414d1511e45177f6915fb4e5478

    • SHA512

      90d9593595511e722b733a13c53d2e69a1adc9c79b3349350deead2c1cdfed615921fb503597950070e9055f6df74bb64ccd94a60d7716822aa632699c70b767

    • SSDEEP

      6144:3PkcFUUUQHs5TlOhDuy4VjmSO6/tU4j06xeJyCjvhsXZ4m05d0qCsfBLuWWCV/rr:3McWUUysz/NhKjJPhM4/5bV/rvgE3

    Score
    10/10
    lummastealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma
    behavioral11behavioral12

    • Target

      LeanC2-main/LiveCharts.MAPS.dll

    • Size

      53KB

    • MD5

      dfee15e4c6efa37e6645d8b47c8581e0

    • SHA1

      876140e0855fcd15bfb590431fb7b280d1db4a21

    • SHA256

      5b8a9a04f454a2c4da5989fa454a0138d3e5c40712816600f90111b7bf045c40

    • SHA512

      4d0e7b0a5642b649c04e54d89e707ec00e79a0fa282eac19b6097b819652045c3e157763b5b2922a4c2252b0877059ef90eb60038280dbfbef9502f421d739df

    • SSDEEP

      768:r4gOx89xKERw2U11HI+bZO603JLw8MOrNNLSW5/5xTcb2y1ehVHp:rPKB22HIwwFNuC5N6n+VHp

    Score
    1/10
    behavioral13behavioral14

    • Target

      LeanC2-main/LiveCharts.dll

    • Size

      148KB

    • MD5

      9642899636959b7fc89bf34a8b998a90

    • SHA1

      479a0254d1c9e5565c7d861bb77f54b7eae50c96

    • SHA256

      9fcf89837b60f69c1c501e4cfa4d2860887afd0b8f325803367e795a4e3bc9ca

    • SHA512

      435dccb57ff3e9d0663770768c866838b19fbaa5b8e79de0ca111d9c73276f016e016d1d268f72cf3435ecac122039764fada952e1a4f68f368b492bb866c9a2

    • SSDEEP

      3072:saegvMNVoz3Vlw6/R3z3MV1IdJJGVKWHC2KdxFFT9lzo:VFJlwYMVWY65z

    Score
    1/10
    behavioral15behavioral16

    • Target

      LeanC2-main/LiveCharts.pdb

    • Size

      355KB

    • MD5

      f3c4997da85fc8495388fc5ea284a697

    • SHA1

      2c82ee0278886b217e7dd92ea3351aced72893c8

    • SHA256

      cb8b4cdeb2ba07ecfc6686840a94c2ac626a2f9d577aff2d16e4d69ea086200c

    • SHA512

      f0e038c26bcf478fe8feda3ec9144e42c3a27b05eae3fde08bfaddbcb5f7cb5e96acec7f280f87d7eab01345c5c5ac1e2f9251bc115fb9a6dc8ee4fcaf8ee09f

    • SSDEEP

      3072:LJJHkvG3HfqCz4obLn3NoWaVG4RN4zQj5I5NR2YyzDJpI1OJExZ:LJJEuPqCz9bLNQXIU8o0Z

    Score
    3/10
    behavioral17behavioral18

    • Target

      LeanC2-main/README.md

    • Size

      420B

    • MD5

      c055a6ca3af98b4ea5d50f8b693e43b1

    • SHA1

      6e9beb659e4441913053538e03a00b3669349b6d

    • SHA256

      bf02ce9ce40fa7238dd7feaa07320f3605d076d0566872e0f72d5d31648f015e

    • SHA512

      18464bdea7362c33aab5220e3d3d79ca8440657ee13147b1cfca6e0dda000227a980ac57173ec1ac2e7abfe4aeb30248cb88743e2bb42028f05cc097f38bb5ba

    Score
    3/10
    behavioral19behavioral20

MITRE ATT&CK Matrix ATT&CK v13

Tasks