General

  • Target

    Loader.exe

  • Size

    1.6MB

  • Sample

    240801-zn449awekj

  • MD5

    764510ca4d068d801b197f37ec6cda2b

  • SHA1

    4f6caff1d549da4d6197538cd709e710bfcbda12

  • SHA256

    67ad22a515edc4f74baadde57f258c528e8796d643c6bf8c489728b1de90ee30

  • SHA512

    6dde119b5cfbdc423876346a8441c6bb1cc3ea4e7e181747e11edf0961f58882989da7696023e95931884285841c139c6e04608be29bc5fe44824149b151ba4e

  • SSDEEP

    12288:zjACw3BbdP7ibULR5KPYJVFAdEjQ1G87J3rsoUbJrrGWK5cXVXn0jUNH6hGbQ+GJ:zjGBN7nwo0sk/bN6yWc05

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://demandlinzei.shop/api

https://applyzxcksdia.shop/api

https://replacedoxcjzp.shop/api

https://declaredczxi.shop/api

https://catchddkxozvp.shop/api

https://arriveoxpzxo.shop/api

https://contemplateodszsv.shop/api

https://bindceasdiwozx.shop/api

https://conformfucdioz.shop/api

Extracted

Family

lumma

C2

https://tenntysjuxmz.shop/api

Targets

    • Target

      Loader.exe

    • Size

      1.6MB

    • MD5

      764510ca4d068d801b197f37ec6cda2b

    • SHA1

      4f6caff1d549da4d6197538cd709e710bfcbda12

    • SHA256

      67ad22a515edc4f74baadde57f258c528e8796d643c6bf8c489728b1de90ee30

    • SHA512

      6dde119b5cfbdc423876346a8441c6bb1cc3ea4e7e181747e11edf0961f58882989da7696023e95931884285841c139c6e04608be29bc5fe44824149b151ba4e

    • SSDEEP

      12288:zjACw3BbdP7ibULR5KPYJVFAdEjQ1G87J3rsoUbJrrGWK5cXVXn0jUNH6hGbQ+GJ:zjGBN7nwo0sk/bN6yWc05

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks