General

  • Target

    file.exe

  • Size

    6.1MB

  • Sample

    240512-jptf5saf48

  • MD5

    23d2c70df5b4268d75b493c4f1f92df3

  • SHA1

    1f913ae61c1302bf2d5a00e4d6364bd683ccdd5f

  • SHA256

    7c7b040b2b7a0dfa9ad2dedb466309e7c56c3966ca9bf32d6f2870b6ac2d37f2

  • SHA512

    513f1e00f2395b943d79951feceeb6420e74d459bad321d9526783812fd3a9720b392b99ce3e29a3715f4eee8be94b16fef97c80ba40f99f1d11646639fea64c

  • SSDEEP

    196608:Wlsjs/wkVP4B4CE9PjMdWpT6TDG0Z16gc0ziPreaQaoHUC:Wlso/rOHUC

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://vehicledropliberwls.shop/api

https://sofaprivateawarderysj.shop/api

https://lineagelasserytailsd.shop/api

https://tendencyportionjsuk.shop/api

https://headraisepresidensu.shop/api

https://appetitesallooonsj.shop/api

https://minorittyeffeoos.shop/api

https://prideconstituiiosjk.shop/api

https://smallelementyjdui.shop/api

Targets

    • Target

      file.exe

    • Size

      6.1MB

    • MD5

      23d2c70df5b4268d75b493c4f1f92df3

    • SHA1

      1f913ae61c1302bf2d5a00e4d6364bd683ccdd5f

    • SHA256

      7c7b040b2b7a0dfa9ad2dedb466309e7c56c3966ca9bf32d6f2870b6ac2d37f2

    • SHA512

      513f1e00f2395b943d79951feceeb6420e74d459bad321d9526783812fd3a9720b392b99ce3e29a3715f4eee8be94b16fef97c80ba40f99f1d11646639fea64c

    • SSDEEP

      196608:Wlsjs/wkVP4B4CE9PjMdWpT6TDG0Z16gc0ziPreaQaoHUC:Wlso/rOHUC

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks