General

  • Target
    19c3f9d385dca733355990795cf3a0a3bd4c7f883f7464f55dd3f1c9cc75956c.dll
  • Size 423KB
  • Sample240604-be6pqaff91
  • SHA256 19c3f9d385dca733355990795cf3a0a3bd4c7f883f7464f55dd3f1c9cc75956c
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • lumma

C2
  • https://considerrycurrentyws.shop/api

  • https://horsedwollfedrwos.shop/api

  • https://patternapplauderw.shop/api

  • https://understanndtytonyguw.shop/api

  • https://messtimetabledkolvk.shop/api

  • https://detailbaconroollyws.shop/api

  • https://deprivedrinkyfaiir.shop/api

  • https://relaxtionflouwerwi.shop/api

Targets

    • Target
      19c3f9d385dca733355990795cf3a0a3bd4c7f883f7464f55dd3f1c9cc75956c.dll
    • Size 423KB
    • SHA256 19c3f9d385dca733355990795cf3a0a3bd4c7f883f7464f55dd3f1c9cc75956c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks