Resubmissions

01/07/2024, 19:00

240701-xnp9zstfnc5

01/07/2024, 18:54

240701-xkj9kaxflj4

01/07/2024, 18:53

240701-xjrbgstdrf10

01/07/2024, 18:44

240701-xdytdatbqe7

General

  • Target
    ezyZip.zip
  • Size 1.0MB
  • Sample240701-xjrbgstdrf
  • SHA256 9d0547070e294e4158e6c446fa2295f5ae170f31cc64d677c5261d14caf38ab8
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • lumma

C2
  • https://groundsmooors.shop/api

  • https://potterryisiw.shop/api

  • https://foodypannyjsud.shop/api

  • https://contintnetksows.shop/api

  • https://reinforcedirectorywd.shop/api

Targets

    • Target
      JudgeLZT.exe
    • Size 951KB
    • SHA256 1c84f3a2fd0a00690b2a2e385d952ec3f7a7c94223fd0e3a80aff510d329d13c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks