General

  • Target

    2024-08-29_1cea78d965a4cb30ad55c5f6558d3c26_poet-rat_snatch

  • Size

    20.4MB

  • Sample

    240829-fbpdgstgph

  • MD5

    1cea78d965a4cb30ad55c5f6558d3c26

  • SHA1

    5d1c410fbd7172c17305818b61db85ffdd00a8f0

  • SHA256

    c5d785d1551912803b69857b61227c231ce9b90d54fbc5055d5bf0dec794ec95

  • SHA512

    f137dfba0096aea6db32cd079ab10cccb75542f9a8232296f5a5dd7309a1778e2c3402db3b915c0863981c734f1287cf4b7cee43c7138f335d8e8869025b7c62

  • SSDEEP

    196608://rICSdjMbk9HA1mXAEYqvv/68UK9EbOIq0d:t4VA1mXfjXObHJd

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://consideratisiqw.shop/api

https://interactiedovspm.shop/api

https://charecteristicdxp.shop/api

Targets

    • Target

      2024-08-29_1cea78d965a4cb30ad55c5f6558d3c26_poet-rat_snatch

    • Size

      20.4MB

    • MD5

      1cea78d965a4cb30ad55c5f6558d3c26

    • SHA1

      5d1c410fbd7172c17305818b61db85ffdd00a8f0

    • SHA256

      c5d785d1551912803b69857b61227c231ce9b90d54fbc5055d5bf0dec794ec95

    • SHA512

      f137dfba0096aea6db32cd079ab10cccb75542f9a8232296f5a5dd7309a1778e2c3402db3b915c0863981c734f1287cf4b7cee43c7138f335d8e8869025b7c62

    • SSDEEP

      196608://rICSdjMbk9HA1mXAEYqvv/68UK9EbOIq0d:t4VA1mXfjXObHJd

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks