General

  • Target

    installer.exe

  • Size

    508KB

  • Sample

    240806-x1yrws1frd

  • MD5

    f1b2b392b9b42582b3319f052b927bac

  • SHA1

    53c2c995aea785414372b146ecbb985a6e129aee

  • SHA256

    dfe3a8253d2604e17029c16fdcd6e1b4a6af391a74c832745c861f55db0de842

  • SHA512

    5b21a90d18f9204801b999ca60391fb7a3b9aa6a59911a328da906aaf7fd755dabcfe5d50d0ed2778ca2155fba01d3d6fe8f573d0311ae11b041ad7a5d264893

  • SSDEEP

    12288:Z9F5yzOxwqwXONI3Y/l5+rcNG9dtA7EuPDB82:7GzLXg5/l5+r73taEuLu

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://kaminiasbbefow.shop/api

Extracted

Family

lumma

C2

https://tenntysjuxmz.shop/api

Targets

    • Target

      installer.exe

    • Size

      508KB

    • MD5

      f1b2b392b9b42582b3319f052b927bac

    • SHA1

      53c2c995aea785414372b146ecbb985a6e129aee

    • SHA256

      dfe3a8253d2604e17029c16fdcd6e1b4a6af391a74c832745c861f55db0de842

    • SHA512

      5b21a90d18f9204801b999ca60391fb7a3b9aa6a59911a328da906aaf7fd755dabcfe5d50d0ed2778ca2155fba01d3d6fe8f573d0311ae11b041ad7a5d264893

    • SSDEEP

      12288:Z9F5yzOxwqwXONI3Y/l5+rcNG9dtA7EuPDB82:7GzLXg5/l5+r73taEuLu

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks