General

  • Target
    Setup_soft.exe
  • Size 4.6MB
  • Sample240609-pbbl3aad4w
  • SHA256 4dc52a8fde81ff561a384acda7b3c4b8ca66d058cfdcb76d8317f8c664137702
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • lumma

C2
  • https://liabiliytshareodlkv.shop/api

  • https://notoriousdcellkw.shop/api

  • https://conferencefreckewl.shop/api

  • https://flourhishdiscovrw.shop/api

  • https://landdumpycolorwskfw.shop/api

  • https://ohfantasyproclaiwlo.shop/api

  • https://parallelmercywksoffw.shop/api

  • https://barebrilliancedkoso.shop/api

Targets

    • Target
      Setup_soft.exe
    • Size 4.6MB
    • SHA256 4dc52a8fde81ff561a384acda7b3c4b8ca66d058cfdcb76d8317f8c664137702
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks