General

  • Target

    8c0700a14b053b5a71fb7060992f4da9.bin

  • Size

    4.9MB

  • Sample

    240822-by4z8svhkp

  • MD5

    3d86562848560b21849ee640b14c6ae8

  • SHA1

    40a6772a7a0d7320db19b71b9ad9c9366a22365c

  • SHA256

    6f80cfdf43f5fbc5e30fd7df62394585e2ce5cc90eb5111b6830c3472a76efa3

  • SHA512

    4ddbe85cf236788dafde70551bb6697673186cf8ec59f27614d4ae69d3280a8d182dd3cfbe49ecbc73caabd5e640e1414812324a5cf083caf17e2a8e0df0d2e5

  • SSDEEP

    98304:DoAJ/jhtBqywqbCuFjys1OcheCbeEsYuLI4r:sAJ/gNqbjFjys1O88YuLIu

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://consciousourwi.shop/api

https://potentioallykeos.shop/api

https://interactiedovspm.shop/api

https://charecteristicdxp.shop/api

https://cagedwifedsozm.shop/api

https://deicedosmzj.shop/api

https://southedhiscuso.shop/api

https://tenntysjuxmz.shop/api

Targets

    • Target

      c71ed9c894349306956a40c939056be8ae8c1991a55588517e771c819f1a174f.exe

    • Size

      15.3MB

    • MD5

      8c0700a14b053b5a71fb7060992f4da9

    • SHA1

      26f30540255ca092933c905a20e8ad65a8a90237

    • SHA256

      c71ed9c894349306956a40c939056be8ae8c1991a55588517e771c819f1a174f

    • SHA512

      1af698418001b4e5bc6bd8ee24656db82c6a99eeac5a57a1c57a82075a922c2aa17c7da9ab5fb46d11594fa7657b418556efab956bcc09831931e90aa98667d6

    • SSDEEP

      98304:U5/DB/m8sWFppwQrJDOJhUI6JfQw+h+s9zzBEO8gEKRmKSyM:6rFppwGJZghN9SrgECl

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks