General

  • Target
    setup-win-x86-x64.exe.zip
  • Size 27.0MB
  • Sample240527-dybd2aee3s
  • SHA256 91e268e53754fcaaab91a3ad32ca4f67fbfc4903e75733a7174d28e1b85dd190
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • lumma

C2
  • https://alcojoldwograpciw.shop/api

  • https://productivelookewr.shop/api

  • https://tolerateilusidjukl.shop/api

  • https://shatterbreathepsw.shop/api

  • https://shortsvelventysjo.shop/api

  • https://incredibleextedwj.shop/api

  • https://liabilitynighstjsko.shop/api

  • https://demonstationfukewko.shop/api

Targets

    • Target
      setup-win-x86-x64.exe
    • Size 73.4MB
    • SHA256 3669c3c9c47a5e5c59f508976a2732aa1feabfa7c90d1912032e3426c30edde5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks