General

  • Target
    Git_softwares_v1_7_9.7z
  • Size 30.9MB
  • Sample240528-shffdaah84
  • SHA256 c3c31f8dfe07919f97abfbd20802ead07c817d4a6d48ba6305444ee36e1da04a
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • lumma

C2
  • https://catlackjellyodwps.shop/api

  • https://horsedwollfedrwos.shop/api

  • https://patternapplauderw.shop/api

  • https://understanndtytonyguw.shop/api

  • https://considerrycurrentyws.shop/api

  • https://messtimetabledkolvk.shop/api

  • https://detailbaconroollyws.shop/api

  • https://deprivedrinkyfaiir.shop/api

  • https://relaxtionflouwerwi.shop/api

Targets

    • Target
      Keygen/mit.dll
    • Size 1.1MB
    • SHA256 7581f48b16bd9c959491730e19687656f045afbab59222c0baba52b25d1055be
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Setup_v1.7.9.exe
    • Size 26.3MB
    • SHA256 8b392082e0f905840b9a6dd6f002ca39fea3900946da10055574cabe6395fb48
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks