General

  • Target

    Main_Satup.zip

  • Size

    9.7MB

  • Sample

    240526-kx6xwadg94

  • MD5

    98673b43e2c30fd63e4fbed27539ea2a

  • SHA1

    d1bfa1cf11b64055b8276e6e839d0c53ef62c359

  • SHA256

    f6a15f2f6460acf1db5c7724f7417772e4f017b783f886cf9def29dc6eebc3aa

  • SHA512

    3efed6999aae94509658dd336af0595dd88e3a0dcde716761c30533d86991675dc892a0e5797b89039f60a1169fc2f3c9c31bb0c2490c67fbde040bbeb16f851

  • SSDEEP

    196608:XgBbsg2oqO5fBCEGQl0TSQ6xP0Y8Sh455OEC1TLw77eTg8FFL9An87Vvv:X8Afob5DzlH8YX4557CpLIWgA6OV3

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://tubewelfaredopw.shop/api

https://museumtespaceorsp.shop/api

https://buttockdecarderwiso.shop/api

https://averageaattractiionsl.shop/api

https://femininiespywageg.shop/api

https://employhabragaomlsp.shop/api

https://stalfbaclcalorieeis.shop/api

https://civilianurinedtsraov.shop/api

https://roomabolishsnifftwk.shop/api

Targets

    • Target

      Main_Satup/Setup.exe

    • Size

      1.1MB

    • MD5

      c047ae13fc1e25bc494b17ca10aa179e

    • SHA1

      e293c7815c0eb8fbc44d60a3e9b27bd91b44b522

    • SHA256

      6c30c8a2e827f48fcfc934dd34fb2cb10acb8747fd11faae085d8ad352c01fbf

    • SHA512

      0cfb96d23b043bcb954cc307f85e5bbc349c0c8a0c6eaa335ea9a8fa19ce65b047f30ed0049562d40880400d4f70e3bb28975d6970f3ae4af6da1ba06e36d48c

    • SSDEEP

      12288:a9hZPq27B7+x3dPC4gvgdVwTzDxsVyY4YoUwpf5kpRG6xsfJAYo2R0B5YD5sW91A:STS27B7+x3E4tdS/Dxkd4YoDfZ90gLS

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    • Target

      Main_Satup/WebView2Loader.dll

    • Size

      157KB

    • MD5

      acb6167e4889182617e938d0eb1f6a1f

    • SHA1

      2ea2dfb265b1f50e3d077615bd9bbe52fa484c61

    • SHA256

      a60d1c9f61ed4cfc6fbc67aa25ed20de947bcad22151c89595a22d5f37b7c73c

    • SHA512

      491daaa013b7d3186f6477104af0eaaa472e3129c5726d3cb0b2d26102293fb5415c85d33fec883591de66ddb76bbcc914ba3306da58e5f3b836b1b403c3b4ed

    • SSDEEP

      3072:Fr0T+bUXzYLPcGE91jkXmxyu1A14mRgD8mjjTIJEtcuVux4W4rbzQrZEhr:FZgjYLPBE9dGvW9mRVEtc+FNDrh

    Score
    1/10
    • Target

      Main_Satup/rockaway.asp

    • Size

      54KB

    • MD5

      04840b28dce561d5b85837ec86cfe238

    • SHA1

      02f899718928805c057f91982c3837b5a485f84c

    • SHA256

      ba8fc8704368822fe51d7812ff9e5026eba7bf62ab47eca7be8292246f2c2da1

    • SHA512

      0a43825fe04e2cfbba51bb17db6ccfc643ad58f16b3c0332facc3f40e7aae7b472b76591fb465cd170c06716d007162f4268aa3d8d1b9c5a8c861211b7c4cc0d

    • SSDEEP

      768:HuZ8HAjhZ1kIazI9fm6rmz3J0JxLSrcZXDFidwPhRJQ3tZtekiE8fMJ2qk:HuZZjlkzIsceJaxLSiZiePhRJY0rjqk

    Score
    3/10
    • Target

      Main_Satup/slavey.svg

    • Size

      1.3MB

    • MD5

      1b7febf62d31a1f8cad94b64eabe5b84

    • SHA1

      83d68132fe447bcf9e119fcda09bad643e3c87f7

    • SHA256

      85c9ae3663d136278fb37f7700bc84f56776f57e6346168c8b15bc10aa3bff22

    • SHA512

      4b1a0c43f081170f342df80d755e1c1e29527e49e9f8f629caa883561b7fe201c0132aefff71681043c352bbac5cf742704472d4ebe018fa13caee70961c9d05

    • SSDEEP

      24576:QuYOl0bMeeN4sXNxz2sqZj/ZbiaGiNufLXnPgY+LvTNILq2Q45bONk81Q/:PflAfC4sXbKhh/JvjuLbuTNNlG

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks