General

  • Target

    20240903a395b339c40903abdea29e30ef6cb2ffpoetratsnatch

  • Size

    20.5MB

  • Sample

    240903-vq7wps1grk

  • MD5

    a395b339c40903abdea29e30ef6cb2ff

  • SHA1

    212eb7240522c9453f0ad0de1ed58c9ec6a80819

  • SHA256

    abac7887a8fa6b97ea5438a52aa1c0ca748ae74bc3de97a9c15a8d9ab74024b8

  • SHA512

    c729fb476169445e52df487657cbb0b7463532c56deb73bfa19da6b6e39e4ea24fc2efbb4a909320fa61140eb5e28d75fd255754532c6a5aaaea3e8311ab0fd3

  • SSDEEP

    196608:F9Ur8kR1j/XlmbuOXo8qpgmGGRcl872TcPdofJ:SXmiWqpgmbt2TcPdofJ

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://femininedspzmhu.shop/api

https://locatedblsoqp.shop/api

Targets

    • Target

      20240903a395b339c40903abdea29e30ef6cb2ffpoetratsnatch

    • Size

      20.5MB

    • MD5

      a395b339c40903abdea29e30ef6cb2ff

    • SHA1

      212eb7240522c9453f0ad0de1ed58c9ec6a80819

    • SHA256

      abac7887a8fa6b97ea5438a52aa1c0ca748ae74bc3de97a9c15a8d9ab74024b8

    • SHA512

      c729fb476169445e52df487657cbb0b7463532c56deb73bfa19da6b6e39e4ea24fc2efbb4a909320fa61140eb5e28d75fd255754532c6a5aaaea3e8311ab0fd3

    • SSDEEP

      196608:F9Ur8kR1j/XlmbuOXo8qpgmGGRcl872TcPdofJ:SXmiWqpgmbt2TcPdofJ

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks