General

  • Target
    9cde28aa663b57630021fe332673ebbc6265dd5d2117dfc7264e3cf0529459b0
  • Size 529KB
  • Sample240605-wmtqcaef28
  • SHA256 9cde28aa663b57630021fe332673ebbc6265dd5d2117dfc7264e3cf0529459b0
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • lumma

C2
  • https://macabrecondfucews.shop/api

  • https://distincttangyflippan.shop/api

  • https://greentastellesqwm.shop/api

  • https://stickyyummyskiwffe.shop/api

  • https://sturdyregularrmsnhw.shop/api

  • https://lamentablegapingkwaq.shop/api

  • https://innerverdanytiresw.shop/api

  • https://standingcomperewhitwo.shop/api

Targets

    • Target
      9cde28aa663b57630021fe332673ebbc6265dd5d2117dfc7264e3cf0529459b0
    • Size 529KB
    • SHA256 9cde28aa663b57630021fe332673ebbc6265dd5d2117dfc7264e3cf0529459b0
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks