Overview

overview

10

Static

static

3

FortniteEx...er.exe

windows10-2004-x64

10

FortniteEx...er.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    FortniteExternalCheat-main.zip

  • Size

    404KB

  • Sample

    240821-rd5c9ssdph

  • MD5

    506d1dc05a39aa68181e7887ec2227b0

  • SHA1

    3b0ffc0ec1668994012d96908177f48b1c844085

  • SHA256

    1c1c00df98b570a3f84ccf848bba6eb4a8c75b227201b97ed6c29cdf1d244b71

  • SHA512

    84c9b8bf7e941cc3dae113a446792b8cca55fe8f92ca17927453290396357f57cb2661cb3a24bf2caaeb8692238992945f1b458cabe240094ad0295ae75f67e7

  • SSDEEP

    12288:1YCqb827Bbz4QlZ6GD+5lN7BCIJXaSQWPiP:y982p0Qz6SQjJoqu

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://extorteauhhwigw.shop/api

https://potterryisiw.shop/api

https://foodypannyjsud.shop/api

https://contintnetksows.shop/api

https://swellfrrgwwos.xyz/api

https://penetratedpoopp.xyz/api

https://ellaboratepwsz.xyz/api

https://towerxxuytwi.xyz/api

https://pedestriankodwu.xyz/api

Extracted

Family

lumma

C2

https://potterryisiw.shop/api

https://foodypannyjsud.shop/api

https://contintnetksows.shop/api

https://tenntysjuxmz.shop/api

Targets

    • Target

      FortniteExternalCheat-main/Loader.exe

    • Size

      554KB

    • MD5

      613df599866679f7f19d12ff86220db8

    • SHA1

      33a2f464888fd8aedd2c4cd8f79e9e43321d8465

    • SHA256

      65f8e0e219637833386b6cfe27bd2f8446a214f02149628c63dd0329501e17e6

    • SHA512

      4091dc9ce75e7ff9a1131aa200e30ca293a8619a616bce17a4f5fa6e79602848efd422be64be7af8aff3c99f75536d2ea45dbcf1d7afb0a7998a0526bf76ce13

    • SSDEEP

      12288:2Nqf82rBbd4Qlj68ZEpv/7B+WIOzys7AsMC6WReVDTKwWZwfwsBAlny7Jc23OBuB:2s82ZWQx6AKsWL

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks