General

  • Target
    c234cdee62048c2529005241c0dd2a9413e0c6201cebd793985e3511f5cafe6b.exe
  • Size 17.9MB
  • Sample240709-chtp1a1bmn
  • SHA256 c234cdee62048c2529005241c0dd2a9413e0c6201cebd793985e3511f5cafe6b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • lumma

C2
  • https://invisibledovereats.shop/api

Targets

    • Target
      c234cdee62048c2529005241c0dd2a9413e0c6201cebd793985e3511f5cafe6b.exe
    • Size 17.9MB
    • SHA256 c234cdee62048c2529005241c0dd2a9413e0c6201cebd793985e3511f5cafe6b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks