General

  • Target

    5029311ee6003a5350130f76ae2218f7366adc28d09c08d6464f58e7f6398fe6

  • Size

    6.1MB

  • Sample

    240429-eke1qshg6t

  • MD5

    aadcb48e55bc9b46330af12e1f07149e

  • SHA1

    899603c0be689463161d54ca169e8469f47c4458

  • SHA256

    5029311ee6003a5350130f76ae2218f7366adc28d09c08d6464f58e7f6398fe6

  • SHA512

    db1fe544f1fdd3653500301a632534bee7d45f6faa85dfe35a4d64b9ae75637d510653571661d92bf295d3e43334dc18cbfda076076715771bbcee8336368fb6

  • SSDEEP

    49152:ANviFe5H7gbXKP19kKNGlXhV6DwOGRJBD9KGiJZIln/fIA2Mg+0SBI3XNvqVUq4/:ANviR6UPLnn/WBymPQFeQzkjwQF7

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://scandalbasketballoe.shop/api

Targets

    • Target

      5029311ee6003a5350130f76ae2218f7366adc28d09c08d6464f58e7f6398fe6

    • Size

      6.1MB

    • MD5

      aadcb48e55bc9b46330af12e1f07149e

    • SHA1

      899603c0be689463161d54ca169e8469f47c4458

    • SHA256

      5029311ee6003a5350130f76ae2218f7366adc28d09c08d6464f58e7f6398fe6

    • SHA512

      db1fe544f1fdd3653500301a632534bee7d45f6faa85dfe35a4d64b9ae75637d510653571661d92bf295d3e43334dc18cbfda076076715771bbcee8336368fb6

    • SSDEEP

      49152:ANviFe5H7gbXKP19kKNGlXhV6DwOGRJBD9KGiJZIln/fIA2Mg+0SBI3XNvqVUq4/:ANviR6UPLnn/WBymPQFeQzkjwQF7

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks