General

  • Target

    2fa5c9b3973341bb4ae72c895bd2a550N.exe

  • Size

    286KB

  • Sample

    240822-t929wszdnp

  • MD5

    2fa5c9b3973341bb4ae72c895bd2a550

  • SHA1

    01a662e1e8a00ff2fbe802d1d479ec6beb5d98b0

  • SHA256

    2fcd09bbfac5cc99d930089a45b85e04e71dfa1cf75df14b14be18a7b68fabc4

  • SHA512

    5f567b49174e9c4d68a7abe6553a07a22fafcee681af2e474ca1a6d5cc728ccd2560939acc1f14532c352fd5e92ca655157edd2ea13e0a7992eb65092fa4a91d

  • SSDEEP

    6144:wl2XyAhSC7y3mHYHgRRH8QJv7ZwbULt8iNOYlyOETEO:hXyyu3mGgHcilwbULttNF0OETEO

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://drinnkysoapmzv.shop/api

https://potentioallykeos.shop/api

Targets

    • Target

      2fa5c9b3973341bb4ae72c895bd2a550N.exe

    • Size

      286KB

    • MD5

      2fa5c9b3973341bb4ae72c895bd2a550

    • SHA1

      01a662e1e8a00ff2fbe802d1d479ec6beb5d98b0

    • SHA256

      2fcd09bbfac5cc99d930089a45b85e04e71dfa1cf75df14b14be18a7b68fabc4

    • SHA512

      5f567b49174e9c4d68a7abe6553a07a22fafcee681af2e474ca1a6d5cc728ccd2560939acc1f14532c352fd5e92ca655157edd2ea13e0a7992eb65092fa4a91d

    • SSDEEP

      6144:wl2XyAhSC7y3mHYHgRRH8QJv7ZwbULt8iNOYlyOETEO:hXyyu3mGgHcilwbULttNF0OETEO

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks