General

  • Target

    bcfbd940e9f24ec2e684ca0e8f5bb70b8b46c9f3152e379366b155f929aa004a.exe

  • Size

    1.9MB

  • Sample

    240813-v6tn1ssakm

  • MD5

    4445cc2635c9809bd80cfc19a0d322f7

  • SHA1

    5b6c1e7269d43c93f11e3ef7fd8390cd8b684824

  • SHA256

    bcfbd940e9f24ec2e684ca0e8f5bb70b8b46c9f3152e379366b155f929aa004a

  • SHA512

    456700c1d892b3c58c91220e86036bdd6980ebad26f57d85bb87197dc4deaef6d5080e4a1dff2b3d6e85cfbb32444bb6f6b5804001baaaf12a10fd83e5549f7e

  • SSDEEP

    12288:pyf6CDTQmseVlDN5umII9CBGqEpMNQ1ryir3R2Iet/QnXsiXi+E1tKFgdafAowP7:pySCDTQjeVX5uyAGvMNuryir3Et/QBG

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://writerospzm.shop/api

https://deallerospfosu.shop/api

https://bassizcellskz.shop/api

https://mennyudosirso.shop/api

https://languagedscie.shop/api

https://complaintsipzzx.shop/api

https://quialitsuzoxm.shop/api

https://tenntysjuxmz.shop/api

Targets

    • Target

      bcfbd940e9f24ec2e684ca0e8f5bb70b8b46c9f3152e379366b155f929aa004a.exe

    • Size

      1.9MB

    • MD5

      4445cc2635c9809bd80cfc19a0d322f7

    • SHA1

      5b6c1e7269d43c93f11e3ef7fd8390cd8b684824

    • SHA256

      bcfbd940e9f24ec2e684ca0e8f5bb70b8b46c9f3152e379366b155f929aa004a

    • SHA512

      456700c1d892b3c58c91220e86036bdd6980ebad26f57d85bb87197dc4deaef6d5080e4a1dff2b3d6e85cfbb32444bb6f6b5804001baaaf12a10fd83e5549f7e

    • SSDEEP

      12288:pyf6CDTQmseVlDN5umII9CBGqEpMNQ1ryir3R2Iet/QnXsiXi+E1tKFgdafAowP7:pySCDTQjeVX5uyAGvMNuryir3Et/QBG

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks