General

  • Target

    Main_Satup.zip

  • Size

    9.7MB

  • Sample

    240526-kwxb2sda41

  • MD5

    98673b43e2c30fd63e4fbed27539ea2a

  • SHA1

    d1bfa1cf11b64055b8276e6e839d0c53ef62c359

  • SHA256

    f6a15f2f6460acf1db5c7724f7417772e4f017b783f886cf9def29dc6eebc3aa

  • SHA512

    3efed6999aae94509658dd336af0595dd88e3a0dcde716761c30533d86991675dc892a0e5797b89039f60a1169fc2f3c9c31bb0c2490c67fbde040bbeb16f851

  • SSDEEP

    196608:XgBbsg2oqO5fBCEGQl0TSQ6xP0Y8Sh455OEC1TLw77eTg8FFL9An87Vvv:X8Afob5DzlH8YX4557CpLIWgA6OV3

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://tubewelfaredopw.shop/api

https://museumtespaceorsp.shop/api

https://buttockdecarderwiso.shop/api

https://averageaattractiionsl.shop/api

https://femininiespywageg.shop/api

https://employhabragaomlsp.shop/api

https://stalfbaclcalorieeis.shop/api

https://civilianurinedtsraov.shop/api

https://roomabolishsnifftwk.shop/api

Targets

    • Target

      Main_Satup/Setup.exe

    • Size

      1.1MB

    • MD5

      c047ae13fc1e25bc494b17ca10aa179e

    • SHA1

      e293c7815c0eb8fbc44d60a3e9b27bd91b44b522

    • SHA256

      6c30c8a2e827f48fcfc934dd34fb2cb10acb8747fd11faae085d8ad352c01fbf

    • SHA512

      0cfb96d23b043bcb954cc307f85e5bbc349c0c8a0c6eaa335ea9a8fa19ce65b047f30ed0049562d40880400d4f70e3bb28975d6970f3ae4af6da1ba06e36d48c

    • SSDEEP

      12288:a9hZPq27B7+x3dPC4gvgdVwTzDxsVyY4YoUwpf5kpRG6xsfJAYo2R0B5YD5sW91A:STS27B7+x3E4tdS/Dxkd4YoDfZ90gLS

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks