General

  • Target

    916b46d033dff6e3ebefc76ed0235540N.exe

  • Size

    507KB

  • Sample

    240806-lz6wbszfnc

  • MD5

    916b46d033dff6e3ebefc76ed0235540

  • SHA1

    11118ff00eda192c867fe4ccef4a6fba0149706c

  • SHA256

    a9ef019bd6851c8bf0a3512e05880d29d39299c8b65af87d5a89b6328a81286a

  • SHA512

    698e9eca6a955c1812a58cbd582875afb337594231b8bb4a54fef2d9af0db15c7644480548a8c9b542eba15d02591590a0d4802c74860d7b4250ed59164cd060

  • SSDEEP

    12288:ekOcs78Swkd89LzasiebTduX057K1PwpltDFM:eko78r3Td/iA3R

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://clouddycuiomsnz.shop/api

https://applyzxcksdia.shop/api

https://replacedoxcjzp.shop/api

https://declaredczxi.shop/api

https://catchddkxozvp.shop/api

https://arriveoxpzxo.shop/api

https://contemplateodszsv.shop/api

https://bindceasdiwozx.shop/api

https://conformfucdioz.shop/api

Extracted

Family

lumma

C2

https://clouddycuiomsnz.shop/api

https://tenntysjuxmz.shop/api

Targets

    • Target

      916b46d033dff6e3ebefc76ed0235540N.exe

    • Size

      507KB

    • MD5

      916b46d033dff6e3ebefc76ed0235540

    • SHA1

      11118ff00eda192c867fe4ccef4a6fba0149706c

    • SHA256

      a9ef019bd6851c8bf0a3512e05880d29d39299c8b65af87d5a89b6328a81286a

    • SHA512

      698e9eca6a955c1812a58cbd582875afb337594231b8bb4a54fef2d9af0db15c7644480548a8c9b542eba15d02591590a0d4802c74860d7b4250ed59164cd060

    • SSDEEP

      12288:ekOcs78Swkd89LzasiebTduX057K1PwpltDFM:eko78r3Td/iA3R

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks