General

  • Target

    Executor.exe

  • Size

    951KB

  • Sample

    240703-kypd8azbmp

  • MD5

    8cee4228b264343cb57977607152304d

  • SHA1

    ee832dc109b63647d46a55abc12ca2b8e607c86d

  • SHA256

    a44053fe7fda9df6f582292b067584af28de2cc172bfdc85a6b08674f56c1e47

  • SHA512

    d8b30513da50d1fbb0e5af54274f144c89a87a00c176a6587c373afe1dc346935e6ad016bafedab47b756e9d10624dcd1c2a767955fe60a58e3bf76822b94826

  • SSDEEP

    24576:0lKOdQCtw8BUZWmUQD0Z73kg5paEcKMs2bPF:4w8BUZWmdtKpaErMrTF

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://groundsmooors.shop/api

https://potterryisiw.shop/api

https://foodypannyjsud.shop/api

https://contintnetksows.shop/api

https://reinforcedirectorywd.shop/api

Targets

    • Target

      Executor.exe

    • Size

      951KB

    • MD5

      8cee4228b264343cb57977607152304d

    • SHA1

      ee832dc109b63647d46a55abc12ca2b8e607c86d

    • SHA256

      a44053fe7fda9df6f582292b067584af28de2cc172bfdc85a6b08674f56c1e47

    • SHA512

      d8b30513da50d1fbb0e5af54274f144c89a87a00c176a6587c373afe1dc346935e6ad016bafedab47b756e9d10624dcd1c2a767955fe60a58e3bf76822b94826

    • SSDEEP

      24576:0lKOdQCtw8BUZWmUQD0Z73kg5paEcKMs2bPF:4w8BUZWmdtKpaErMrTF

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks