General

  • Target

    0SpotifyMusic.exe

  • Size

    16.9MB

  • Sample

    240903-s2adgazgpq

  • MD5

    251726441fbb313a3821d1dacde0a07a

  • SHA1

    c44bcb3e5589471933793aa6cec03956ebfa8aa4

  • SHA256

    7989923d607768681995c3f5486505cf962ddf7391cf50800a6d52e09922cdd5

  • SHA512

    b977d5019b3fcf0468e747b2b4d3fbca07a30f3dca188b0d4559b44e5be2250edb335f9f30105421993d1781fa4136f362b40ea2c3e387210df1bdfeeb58a406

  • SSDEEP

    196608:24oERj3Cwqi6OyV0O/NMNjT/qfN9Fqvrz31aPTbv8PTbb4hnvIBPRPFTN3vEDHir:wROK/N5BmBis

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://reluctancedopmxz.shop/api

https://locatedblsoqp.shop/api

Targets

    • Target

      0SpotifyMusic.exe

    • Size

      16.9MB

    • MD5

      251726441fbb313a3821d1dacde0a07a

    • SHA1

      c44bcb3e5589471933793aa6cec03956ebfa8aa4

    • SHA256

      7989923d607768681995c3f5486505cf962ddf7391cf50800a6d52e09922cdd5

    • SHA512

      b977d5019b3fcf0468e747b2b4d3fbca07a30f3dca188b0d4559b44e5be2250edb335f9f30105421993d1781fa4136f362b40ea2c3e387210df1bdfeeb58a406

    • SSDEEP

      196608:24oERj3Cwqi6OyV0O/NMNjT/qfN9Fqvrz31aPTbv8PTbb4hnvIBPRPFTN3vEDHir:wROK/N5BmBis

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks