General

  • Target

    Soft.zip

  • Size

    6.0MB

  • Sample

    240822-wlmweasgjq

  • MD5

    bfdff58f13fe4a8d7b843e11f9395690

  • SHA1

    8d0cda56e57f73ae8714e15fb4dbe9aa4834f730

  • SHA256

    67a0379932aa7f0fcd0544eec112c29632cb94c25026fb91f4660c9aa42d881d

  • SHA512

    decd2e436ffc3e13cfc0e065d7ac421b7f4316e38b0e7f5cbfe1919e183e290d53b393869ecbe5d59f035fadebe79de5a5652befc85677baa88e9b3825f2d31e

  • SSDEEP

    98304:Uy26IShFEJ6U8zlSskdTt9FOZgABj8tUAT7iUwBO17V7rX/kUvy1ns5w2ML:9W8EJZ8zwDTslBAtJT7iB0rPna1n2M

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://fictionnykwop.shop/api

https://potentioallykeos.shop/api

Targets

    • Target

      Soft.exe

    • Size

      738.3MB

    • MD5

      bc326ee4dc8077a529fdba97fe700eb9

    • SHA1

      25c8ca26f16901c6cc7d019c8cf4228c1040bed1

    • SHA256

      a98827f9f913c38956cd07236eb6541a28d01869b7b72f1a382ec8953e4bbbce

    • SHA512

      6b797ddd58fbba1754d7a13b3bbba2f65f4c2ebe22692a5e34f103810c71a37fddf744c6470f99f935dd00c17422ceb8367c0469a95c83554000db494b6096da

    • SSDEEP

      98304:JiFWh1M/BQI39pr8I9UF/Zq7IlfQi7MVxb7A04o1RtT:Vb2j98xZq7MQi7MPb7T

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks