General

  • Target
    Setupp_x32_x64.exe
  • Size 19.9MB
  • Sample240607-nk3apsgd64
  • SHA256 b23435850c7caa39af8120e3b0d4e88e10b5376dceab0059754d9844300e0426
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • lumma

C2
  • https://thidrsorebahsufll.shop/api

  • https://distincttangyflippan.shop/api

  • https://macabrecondfucews.shop/api

  • https://greentastellesqwm.shop/api

  • https://stickyyummyskiwffe.shop/api

  • https://sturdyregularrmsnhw.shop/api

  • https://lamentablegapingkwaq.shop/api

  • https://innerverdanytiresw.shop/api

  • https://standingcomperewhitwo.shop/api

Targets

    • Target
      Setupp_x32_x64.exe
    • Size 19.9MB
    • SHA256 b23435850c7caa39af8120e3b0d4e88e10b5376dceab0059754d9844300e0426
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks