General

  • Target

    이미지 및 영상 저작권 위반 목록 - SM 엔터테인먼트.exe

  • Size

    2.1MB

  • Sample

    240426-kdnl7acg45

  • MD5

    292a5af0d8d4a5803022019507a83bed

  • SHA1

    85310ecfd16b0920977229ad87f08d1207e756e6

  • SHA256

    b195c8a81abf7913891a8bae26d1a5ad70dc5fdc555a9b57b848a82e251160eb

  • SHA512

    c5cdec88a0ef29f7f7fa92f73296bb6d6b7bde8ccfc600e3fb3012288997981cc1cc356675e32bab55b684ab5b8838ee6f2032cdcac888d2cea5ee681a743766

  • SSDEEP

    24576:ZUubL6cMcjdtsnFVZ+Ghc8zTxm+6Sv/Sr4XDeErmauz5y868Vk5rzarBNz0Kpcq:ZUuGOqFVZfhc8zM+6SvTSz5y868Vk5uV

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://bordersoarmanusjuw.shop/api

https://entitlementappwo.shop/api

https://economicscreateojsu.shop/api

https://pushjellysingeywus.shop/api

https://absentconvicsjawun.shop/api

https://suitcaseacanehalk.shop/api

https://mealplayerpreceodsju.shop/api

https://wifeplasterbakewis.shop/api

Targets

    • Target

      이미지 및 영상 저작권 위반 목록 - SM 엔터테인먼트.exe

    • Size

      2.1MB

    • MD5

      292a5af0d8d4a5803022019507a83bed

    • SHA1

      85310ecfd16b0920977229ad87f08d1207e756e6

    • SHA256

      b195c8a81abf7913891a8bae26d1a5ad70dc5fdc555a9b57b848a82e251160eb

    • SHA512

      c5cdec88a0ef29f7f7fa92f73296bb6d6b7bde8ccfc600e3fb3012288997981cc1cc356675e32bab55b684ab5b8838ee6f2032cdcac888d2cea5ee681a743766

    • SSDEEP

      24576:ZUubL6cMcjdtsnFVZ+Ghc8zTxm+6Sv/Sr4XDeErmauz5y868Vk5rzarBNz0Kpcq:ZUuGOqFVZfhc8zM+6SvTSz5y868Vk5uV

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Suspicious use of NtCreateThreadExHideFromDebugger

MITRE ATT&CK Matrix

Tasks