General

  • Target

    32a5f3c77b99a25d50fb9ac08dd213d7c2f1dfa1102c807f5884865da1a2a3ef

  • Size

    748KB

  • Sample

    240429-en13dahf64

  • MD5

    cb8f88cab9ae04a52314cbfb8f2dfd54

  • SHA1

    f85688ab1b6277943c42d310b4f484cfcdf651b5

  • SHA256

    32a5f3c77b99a25d50fb9ac08dd213d7c2f1dfa1102c807f5884865da1a2a3ef

  • SHA512

    3e84ffb4ed51fd4670e5c155c3792e68f995d5afad625bb7115ef012885d5bbf5ca78a769534ad0037c4701eb09a49e53851f2ce3a3c6aaa69f6bbb16013809f

  • SSDEEP

    12288:Oh1Fk70TnvjcPMEo3CjRJEhBw9qX9ouU/tmxHs+EkpXIzu1PaEaqGU9US6gGLkvB:4k70TrcPMEoyzAEqXOuoYxOAd1PaEaqF

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://decorousnumerousieo.shop/api

Targets

    • Target

      32a5f3c77b99a25d50fb9ac08dd213d7c2f1dfa1102c807f5884865da1a2a3ef

    • Size

      748KB

    • MD5

      cb8f88cab9ae04a52314cbfb8f2dfd54

    • SHA1

      f85688ab1b6277943c42d310b4f484cfcdf651b5

    • SHA256

      32a5f3c77b99a25d50fb9ac08dd213d7c2f1dfa1102c807f5884865da1a2a3ef

    • SHA512

      3e84ffb4ed51fd4670e5c155c3792e68f995d5afad625bb7115ef012885d5bbf5ca78a769534ad0037c4701eb09a49e53851f2ce3a3c6aaa69f6bbb16013809f

    • SSDEEP

      12288:Oh1Fk70TnvjcPMEo3CjRJEhBw9qX9ouU/tmxHs+EkpXIzu1PaEaqGU9US6gGLkvB:4k70TrcPMEoyzAEqXOuoYxOAd1PaEaqF

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks