General

  • Target
    a4ecad90d0192439284faa90ba1322d1fcb4a3d62ba110601a2b6420129ee928
  • Size 7.1MB
  • Sample240704-2naazswbpd
  • SHA256 a4ecad90d0192439284faa90ba1322d1fcb4a3d62ba110601a2b6420129ee928
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • lumma

C2
  • https://invisibledovereats.shop/api

Targets

    • Target
      a4ecad90d0192439284faa90ba1322d1fcb4a3d62ba110601a2b6420129ee928
    • Size 7.1MB
    • SHA256 a4ecad90d0192439284faa90ba1322d1fcb4a3d62ba110601a2b6420129ee928
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks