General

  • Target

    430cff6f0d1b6abb864b941e0cc959fbe03bcbfea9d13a3fd815b346c0c08db0

  • Size

    995KB

  • Sample

    240523-3balnadb27

  • MD5

    9e9cbf47adcd712641f4baba9b1b4944

  • SHA1

    8c75ebde41cddf280ccd2fc6ce990be6f7e08eb3

  • SHA256

    430cff6f0d1b6abb864b941e0cc959fbe03bcbfea9d13a3fd815b346c0c08db0

  • SHA512

    807b11dbeb5380170df107d914de857c7949671115467acf7ab8198d729ffda3b325829d0eb0e4807d23900fba3b2d6dc64e3fb0014bd2c801e440dde69f3d25

  • SSDEEP

    24576:zzQaPu1qVpdlvkO3d0DbFS2K1OeiqwZRfOR2/S0Ewg6:nG1A93d0DBS2Ko5tZBOsSL6

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://buttockdecarderwiso.shop/api

https://museumtespaceorsp.shop/api

https://averageaattractiionsl.shop/api

https://femininiespywageg.shop/api

https://employhabragaomlsp.shop/api

https://stalfbaclcalorieeis.shop/api

https://civilianurinedtsraov.shop/api

https://roomabolishsnifftwk.shop/api

Targets

    • Target

      430cff6f0d1b6abb864b941e0cc959fbe03bcbfea9d13a3fd815b346c0c08db0

    • Size

      995KB

    • MD5

      9e9cbf47adcd712641f4baba9b1b4944

    • SHA1

      8c75ebde41cddf280ccd2fc6ce990be6f7e08eb3

    • SHA256

      430cff6f0d1b6abb864b941e0cc959fbe03bcbfea9d13a3fd815b346c0c08db0

    • SHA512

      807b11dbeb5380170df107d914de857c7949671115467acf7ab8198d729ffda3b325829d0eb0e4807d23900fba3b2d6dc64e3fb0014bd2c801e440dde69f3d25

    • SSDEEP

      24576:zzQaPu1qVpdlvkO3d0DbFS2K1OeiqwZRfOR2/S0Ewg6:nG1A93d0DBS2Ko5tZBOsSL6

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks