General

  • Target

    2a627e55b12be1b4521658c25d2d46d38b87442f648070311cad06e4995a5304.exe

  • Size

    20.3MB

  • Sample

    240817-bjasva1hkm

  • MD5

    c8af5b81b11f3db6cb5b7efab33d11ef

  • SHA1

    fdceb9bb5def7a1887738e9c72a28b411097df00

  • SHA256

    2a627e55b12be1b4521658c25d2d46d38b87442f648070311cad06e4995a5304

  • SHA512

    4812b40f14a3e41763b6645218631f3696e6264d483cdb44221cc1efbb8b71d325f3e921899ad203e894a5832cac4ab89974e94e378e20b1611028b4f4db8e39

  • SSDEEP

    98304:xW+Gcm43XnW2C4/YzHVx4Bu+UxPi+YrmJihOeFXEQp3Bf0n+KXhX38XCaxpmMqmH:oiXy4/YzHVOuBi+YaJZQ3I+KRX38M

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://potentioallykeos.shop/api

https://interactiedovspm.shop/api

https://charecteristicdxp.shop/api

https://cagedwifedsozm.shop/api

https://deicedosmzj.shop/api

https://southedhiscuso.shop/api

https://consciousourwi.shop/api

https://weiggheticulop.shop/api

https://tenntysjuxmz.shop/api

Targets

    • Target

      2a627e55b12be1b4521658c25d2d46d38b87442f648070311cad06e4995a5304.exe

    • Size

      20.3MB

    • MD5

      c8af5b81b11f3db6cb5b7efab33d11ef

    • SHA1

      fdceb9bb5def7a1887738e9c72a28b411097df00

    • SHA256

      2a627e55b12be1b4521658c25d2d46d38b87442f648070311cad06e4995a5304

    • SHA512

      4812b40f14a3e41763b6645218631f3696e6264d483cdb44221cc1efbb8b71d325f3e921899ad203e894a5832cac4ab89974e94e378e20b1611028b4f4db8e39

    • SSDEEP

      98304:xW+Gcm43XnW2C4/YzHVx4Bu+UxPi+YrmJihOeFXEQp3Bf0n+KXhX38XCaxpmMqmH:oiXy4/YzHVOuBi+YaJZQ3I+KRX38M

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks