Resubmissions

22/05/2024, 14:33

240522-rw846see6s

22/05/2024, 14:32

240522-rv83saee4s10

22/05/2024, 14:30

240522-rvkp7aed6310

General

  • Target
    !!#PassCode__2244_With_FulL-$etup.zip
  • Size 5.9MB
  • Sample240522-rvkp7aed63
  • SHA256 68c7f47340b9436795d4e362e4586ef288194b43e6d670b4ee6f345959d5726c
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • lumma

C2
  • https://refundemobxyyeols.shop/api

  • https://museumtespaceorsp.shop/api

  • https://buttockdecarderwiso.shop/api

  • https://averageaattractiionsl.shop/api

  • https://femininiespywageg.shop/api

  • https://employhabragaomlsp.shop/api

  • https://stalfbaclcalorieeis.shop/api

  • https://civilianurinedtsraov.shop/api

  • https://roomabolishsnifftwk.shop/api

Targets

    • Target
      The Main Setup/Setup.exe
    • Size 5.6MB
    • SHA256 2b00b2609b49a41c2d97dba17df688c9f3648802cdfbad4a05b7f8940d2b5493
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

    • Target
      The Main Setup/x86/API-MS-Win-core-xstate-l2-1-0.dll
    • Size 12KB
    • SHA256 7cf73e4f69b3dfd89f3b24167f2f421b17537f3a4e707c63c675457b4fbf850b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      The Main Setup/x86/AzureKeyVaultDgssLib.dll
    • Size 313KB
    • SHA256 dec89c1e8bd55c43d3d13a7903d75dbf5c1f3ba8969202bef1182bb899fb7e02
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      The Main Setup/x86/Microsoft.Toolkit.Win32.UI.XamlHost.dll
    • Size 101KB
    • SHA256 dd136f1fd23e91866a53b9e9a0f28c83fa63c2aee01e61b3fc280e8f8fe549ca
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      The Main Setup/x86/SciLexer.dll
    • Size 587KB
    • SHA256 e7d343d228f308c914942e7edc5884202531b9e14576df3fd38f526366d95f83
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      The Main Setup/x86/Updater-comproxystub.dll
    • Size 107KB
    • SHA256 b783097461d888b3d86598dd85a7aeef2a02969e2c129ca685e38c369f92cd1c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      The Main Setup/x86/WinUiBootstrapper.dll
    • Size 866KB
    • SHA256 596ec2565bb228fb8a8089b5fb9fa782d46897ed12ce00d28c65bca673239391
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      The Main Setup/x86/api-ms-win-core-console-l1-1-0.dll
    • Size 12KB
    • SHA256 915c296fabf88b9e3b43b5a570a6e8e642071678ac443c555f6e95bee7925bc5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      The Main Setup/x86/api-ms-win-core-console-l1-2-0.dll
    • Size 12KB
    • SHA256 67f4d89f85a61b18ac1f5d6d04f625d64bedb252c219ff9785cd1508876bc718
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      The Main Setup/x86/api-ms-win-core-datetime-l1-1-0.dll
    • Size 12KB
    • SHA256 55804126146c7c575add104eec386f161672cb740e765eaaf7ec8707a7cd2af6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      The Main Setup/x86/api-ms-win-core-debug-l1-1-0.dll
    • Size 12KB
    • SHA256 d95f01fc571294b128d0cfde5e68472b8f6a0b3dd5f0c18b676e3a077df80cc7
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      The Main Setup/x86/api-ms-win-core-errorhandling-l1-1-0.dll
    • Size 12KB
    • SHA256 8b4a9ba2855247adddb4ee1e7f503dad5674ea7bb45015bd69cc83a3332f696b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      The Main Setup/x86/api-ms-win-core-fibers-l1-1-0.dll
    • Size 12KB
    • SHA256 cb9f01af9ba4b50c604633073e4003652f1e99faff93daacd4502d4c08177688
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      The Main Setup/x86/api-ms-win-core-file-l1-1-0.dll
    • Size 15KB
    • SHA256 420395ac9ab87accb00fa478be0b73b583a42d406d1341d98a77f6189b556998
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      The Main Setup/x86/api-ms-win-core-file-l1-2-0.dll
    • Size 12KB
    • SHA256 b2546e21336714858d2b03d2532b6955dcd7ff46b30435f6d309d8c39d0dc957
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      The Main Setup/x86/api-ms-win-core-file-l2-1-0.dll
    • Size 12KB
    • SHA256 b5823ce2d6e600eaf4e2b1353600dca0351c46d014f97ac525c3ee9dafb2bf4c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      The Main Setup/x86/api-ms-win-core-handle-l1-1-0.dll
    • Size 12KB
    • SHA256 3ab7f3707a380352c5aff32c0761c5ff86f358f3683b1dd273da8be18f6521a1
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      The Main Setup/x86/api-ms-win-core-heap-l1-1-0.dll
    • Size 12KB
    • SHA256 0c25f2284aec3aa7dcf6432ba9416e2fb289e08bbd996bcddadaabe42e361b46
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      The Main Setup/x86/api-ms-win-core-interlocked-l1-1-0.dll
    • Size 12KB
    • SHA256 616ac120e3b9abb6f245a09fc17398bef10c5e6aa617849fe68a89efdcddb7fe
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      The Main Setup/x86/api-ms-win-core-libraryloader-l1-1-0.dll
    • Size 13KB
    • SHA256 23fbe7263ca595af627fc37e774fc6fd5f66daecb54e38d48486c9df09e438f4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      The Main Setup/x86/api-ms-win-core-localization-l1-2-0.dll
    • Size 15KB
    • SHA256 230da452a8068ff5be158d84618c9d291bf9b8bc878ed5d56318558d52e4966a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      The Main Setup/x86/api-ms-win-core-memory-l1-1-0.dll
    • Size 12KB
    • SHA256 b858256aa6a926f89714f21790d25e90b7dea5096bd9935454a8b4c7abea736c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      The Main Setup/x86/api-ms-win-core-namedpipe-l1-1-0.dll
    • Size 12KB
    • SHA256 4b00d5be82d9eae3445b559f4eb1c62eb192f5554b9edad50b09f98fbc65c126
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      The Main Setup/x86/api-ms-win-core-processenvironment-l1-1-0.dll
    • Size 13KB
    • SHA256 d08d50eff27e71af2e72655edf22dbdea85346cc14be53c48988a3c039fdf17f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      The Main Setup/x86/api-ms-win-core-processthreads-l1-1-0.dll
    • Size 14KB
    • SHA256 ca2b5493a6699756b3bf63d9bd807b0204419ec3087d02f4bb5c7b01e8fffd4e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      The Main Setup/x86/api-ms-win-core-processthreads-l1-1-1.dll
    • Size 12KB
    • SHA256 9f0d6efb48c7f8c0f001ec30d45558c5d8675c06573eca7c8125a7d5a1db2634
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10

MITRE ATT&CK Matrix

Tasks