General

  • Target

    injectorV2.4.exe

  • Size

    495KB

  • Sample

    240801-zm1qfawdrl

  • MD5

    cc50342a5e8ec23330b0864fb94ea4e7

  • SHA1

    d029c92b6fb6dc38a4cdd35554ca0b7e1b8f8123

  • SHA256

    f0af63b4468d4369d5abd59fba594685f424a136332b358bfac9b76ea201be6a

  • SHA512

    161e80e888aad08b2ba02c0fe7fa68856387e17942514daf5bde70190ef5567c995cca38936f0b18691af95f8c30bb9f4f4568a344ded7d10650a5db6054054d

  • SSDEEP

    12288:9azuzEtDcRUKgz4IHgR95DO5pkMPLgoQB2Rtv5hS:9VzEC64IHo9VkNgVBGX

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://demandlinzei.shop/api

https://applyzxcksdia.shop/api

https://replacedoxcjzp.shop/api

https://declaredczxi.shop/api

https://catchddkxozvp.shop/api

https://arriveoxpzxo.shop/api

https://contemplateodszsv.shop/api

https://bindceasdiwozx.shop/api

https://conformfucdioz.shop/api

Extracted

Family

lumma

C2

https://tenntysjuxmz.shop/api

Targets

    • Target

      injectorV2.4.exe

    • Size

      495KB

    • MD5

      cc50342a5e8ec23330b0864fb94ea4e7

    • SHA1

      d029c92b6fb6dc38a4cdd35554ca0b7e1b8f8123

    • SHA256

      f0af63b4468d4369d5abd59fba594685f424a136332b358bfac9b76ea201be6a

    • SHA512

      161e80e888aad08b2ba02c0fe7fa68856387e17942514daf5bde70190ef5567c995cca38936f0b18691af95f8c30bb9f4f4568a344ded7d10650a5db6054054d

    • SSDEEP

      12288:9azuzEtDcRUKgz4IHgR95DO5pkMPLgoQB2Rtv5hS:9VzEC64IHo9VkNgVBGX

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks