General

  • Target
    78377f8e54e07c9b857cc65046843eff9614c9101e4aad1ee2fbf242b7a28ee6
  • Size 440KB
  • Sample240610-3mbyvsvfqa
  • SHA256 78377f8e54e07c9b857cc65046843eff9614c9101e4aad1ee2fbf242b7a28ee6
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • lumma

C2
  • https://distincttangyflippan.shop/api

  • https://macabrecondfucews.shop/api

  • https://greentastellesqwm.shop/api

  • https://stickyyummyskiwffe.shop/api

  • https://sturdyregularrmsnhw.shop/api

  • https://lamentablegapingkwaq.shop/api

  • https://innerverdanytiresw.shop/api

  • https://standingcomperewhitwo.shop/api

Targets

    • Target
      78377f8e54e07c9b857cc65046843eff9614c9101e4aad1ee2fbf242b7a28ee6
    • Size 440KB
    • SHA256 78377f8e54e07c9b857cc65046843eff9614c9101e4aad1ee2fbf242b7a28ee6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks