General

  • Target

    a657c36bedef76379420ba3d1abad000N.exe

  • Size

    272KB

  • Sample

    240822-nagk9awgkp

  • MD5

    a657c36bedef76379420ba3d1abad000

  • SHA1

    947e67e76e9159a62bb2f9548343098279f92418

  • SHA256

    c0e9d757414c196265a29ebd172b70c8331bc3b9f6a17457d1f2f5444e644640

  • SHA512

    fa052bfe3b2346f7b557936edbc8584bc8b26628af6cb0ece6e5d79f3dcb77f7963441502638834ad46cc31f1bf0b0d0148a49026a06cb69b88345b95cac970b

  • SSDEEP

    6144:Qgu+19C2c7F0zGT859Ncir3jBxtk9gjjfRPqiBk:9+2c7uSw59aGOa3B

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://weaknessmznxo.shop/api

https://potentioallykeos.shop/api

https://interactiedovspm.shop/api

https://charecteristicdxp.shop/api

https://cagedwifedsozm.shop/api

https://deicedosmzj.shop/api

https://southedhiscuso.shop/api

https://consciousourwi.shop/api

https://tenntysjuxmz.shop/api

Targets

    • Target

      a657c36bedef76379420ba3d1abad000N.exe

    • Size

      272KB

    • MD5

      a657c36bedef76379420ba3d1abad000

    • SHA1

      947e67e76e9159a62bb2f9548343098279f92418

    • SHA256

      c0e9d757414c196265a29ebd172b70c8331bc3b9f6a17457d1f2f5444e644640

    • SHA512

      fa052bfe3b2346f7b557936edbc8584bc8b26628af6cb0ece6e5d79f3dcb77f7963441502638834ad46cc31f1bf0b0d0148a49026a06cb69b88345b95cac970b

    • SSDEEP

      6144:Qgu+19C2c7F0zGT859Ncir3jBxtk9gjjfRPqiBk:9+2c7uSw59aGOa3B

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks