lumma | 71db397fbd5dd6a239c4b575a3f32b530dc937c68b2c39178c46312eb04ba564

General

Target
SmokeySpoofer-main.zip
Size 581KB
Sample240620-dmaclavgqc
SHA256 71db397fbd5dd6a239c4b575a3f32b530dc937c68b2c39178c46312eb04ba564
MD5 ba87cc00ca14cbd13dcde6a2a36893f3
SHA1 96baccba657953254f863c827a745ba6e888d952
SHA512 fe9f18128d83441c41860d1453658653f1c5a4958429598d7bde24f21830032627e52527b6e91511e5e65f8ee98fd8105c553717d7d517a4e4adc5f7ef0c5c23
SSDEEP 12288:jiowaAbs6anNi3bEWGSHdWCvFM70vbPmHM+PXHeD:jiZFbas3bETSHXFq0vasweD
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Extracted

Family

lumma

C2

https://cleartotalfisherwo.shop/api
https://worryfillvolcawoi.shop/api
https://enthusiasimtitleow.shop/api
https://dismissalcylinderhostw.shop/api
https://affordcharmcropwo.shop/api
https://diskretainvigorousiw.shop/api
https://communicationgenerwo.shop/api
https://pillowbrocccolipe.shop/api

Targets

- Target
  SmokeySpoofer-main/SmokeySpoofer/Auth.cs
- Size 1KB
- SHA256 f03759509e24bc267fcbb4d9c2a4dd76c7017095f41ea279024ddef00659802d
- MD5 1e8fef6386f0c75e069aa1db7dd94825
- SHA1 21fa06bdbd33fa0d989b3cf18f97402055484d58
- SHA512 1878568d5743d10ac8e8f7346551d9e66cad0656b4b2ae47c56d5aa456f2e13022d5d94db0b558887b70113f50fd40df321e27c11a61d7162a52fe66fdc171fc
- MD5 SHA1 SHA512
Score

10^/10

lumma execution stealer
- Lumma Stealer
  An infostealer written in C++ first seen in August 2022.
  stealer lumma
- Legitimate hosting services abused for malware hosting/C2
behavioral1
- Target
  SmokeySpoofer-main/SmokeySpoofer/Auth.resx
- Size 83KB
- SHA256 f7fb2824950d0f3a7f37b363bb10e7654206a710d802be7b1ab1a32750e8ed8f
- MD5 ef63cc8ac4644f7e44a9029e083182cd
- SHA1 ca48aecb89f2ce0b69fedec48f42fa0527ff7277
- SHA512 06c4ca3d501a03fd3823c29c3472d4824bc324d5e52681281dbb467974e53d9a8a2ce687e66705db829a70629495108ef58c667448956c38caf6b9d4e70ca2ba
- SSDEEP 1536:ZfIiWxYUeXEnvxXFVO0vnOXr2hVifuP1bKcoReY9w3Y7hkDj5/:ZfIJYUsYvW2hVigOcon9w3Yla
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral2
- Target
  SmokeySpoofer-main/SmokeySpoofer/Main.resx
- Size 83KB
- SHA256 f7fb2824950d0f3a7f37b363bb10e7654206a710d802be7b1ab1a32750e8ed8f
- MD5 ef63cc8ac4644f7e44a9029e083182cd
- SHA1 ca48aecb89f2ce0b69fedec48f42fa0527ff7277
- SHA512 06c4ca3d501a03fd3823c29c3472d4824bc324d5e52681281dbb467974e53d9a8a2ce687e66705db829a70629495108ef58c667448956c38caf6b9d4e70ca2ba
- SSDEEP 1536:ZfIiWxYUeXEnvxXFVO0vnOXr2hVifuP1bKcoReY9w3Y7hkDj5/:ZfIJYUsYvW2hVigOcon9w3Yla
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3
- Target
  SmokeySpoofer-main/SmokeySpoofer/Properties/Resources.Designer.cs
- Size 2KB
- SHA256 a50d58093c8037cd4e5e6c2b5c033f7c69d5556abe64b6e84990a244f63e696d
- MD5 d64bcae8319b6882b8e0f08dc5701d7e
- SHA1 c4453f0461d9ccc1fdb59b42bf63501e7323b52c
- SHA512 ba8127b4d4663c89fcfb4c8499a6b44646e5665c3e53d46d257ccdb4c41a27307f27817362c23cd2ea285cfbfc6189291a897816c487f7412df8a10734c9438f
- MD5 SHA1 SHA512
Score

1^/10
behavioral4
- Target
  SmokeySpoofer-main/SmokeySpoofer/Properties/Resources.resx
- Size 5KB
- SHA256 4e124f5a7694ffe813c60601b1b73c53e47536b1f1c0e798d4d55bfc2ca3774f
- MD5 c07716633f086d91759ae32a18996a1a
- SHA1 bf3383c20acf6e64ce49f120938456161e5f6cb9
- SHA512 c6ad0ec603ff69d2d1b787db9426f29d44ea1ba45cf1d2b7ec41cc2bd6d5c93af8d2299139cc1c5d10d56718f36daa37d544f8d5411fad91a72efc2e70454cdf
- SSDEEP 96:ECf+lbD5X5LPXCazYV5Lv6K6uOidfaxwsxuUPFE3qxdRMvDTursrbLAy202W:Zf+tLPfYnLvFVOiFQaUR6
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5
- Target
  SmokeySpoofer-main/SmokeySpoofer/SmokeySpoofer.exe
- Size 490KB
- SHA256 f5f14b9073f86da926a8ed319b3289b893442414d1511e45177f6915fb4e5478
- MD5 9c9245810bad661af3d6efec543d34fd
- SHA1 93e4f301156d120a87fe2c4be3aaa28b9dfd1a8d
- SHA512 90d9593595511e722b733a13c53d2e69a1adc9c79b3349350deead2c1cdfed615921fb503597950070e9055f6df74bb64ccd94a60d7716822aa632699c70b767
- SSDEEP 6144:3PkcFUUUQHs5TlOhDuy4VjmSO6/tU4j06xeJyCjvhsXZ4m05d0qCsfBLuWWCV/rr:3McWUUysz/NhKjJPhM4/5bV/rvgE3
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

lumma stealer
- Lumma Stealer
  An infostealer written in C++ first seen in August 2022.
  stealer lumma
behavioral6