General

  • Target

    9f3df6f397f2e8c42803427fcb0a0e8caa3383f09f9e827f053af663fa45b38e.exe

  • Size

    13KB

  • Sample

    240904-cgr5savbjh

  • MD5

    a6ffb8e0386c0f1a1a611c7922dc1b08

  • SHA1

    c015f5263c888fed35b8d8977043450f68c71203

  • SHA256

    9f3df6f397f2e8c42803427fcb0a0e8caa3383f09f9e827f053af663fa45b38e

  • SHA512

    159aa98958587f41c8e5e60ac02801ab62ef4ca0b493cea89ae5b6b499d6f6bc655cec4577945697a46372dde387d79bac75efbe53e147ba3445e2768e3e4224

  • SSDEEP

    384:Y7/1TebgIciVU6c35z1R5MqPqV08QbTf6Q:YT1Te505xwubTff

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://miracledzmnqwui.shop/api

https://interactiedovspm.shop/api

https://charecteristicdxp.shop/api

Targets

    • Target

      9f3df6f397f2e8c42803427fcb0a0e8caa3383f09f9e827f053af663fa45b38e.exe

    • Size

      13KB

    • MD5

      a6ffb8e0386c0f1a1a611c7922dc1b08

    • SHA1

      c015f5263c888fed35b8d8977043450f68c71203

    • SHA256

      9f3df6f397f2e8c42803427fcb0a0e8caa3383f09f9e827f053af663fa45b38e

    • SHA512

      159aa98958587f41c8e5e60ac02801ab62ef4ca0b493cea89ae5b6b499d6f6bc655cec4577945697a46372dde387d79bac75efbe53e147ba3445e2768e3e4224

    • SSDEEP

      384:Y7/1TebgIciVU6c35z1R5MqPqV08QbTf6Q:YT1Te505xwubTff

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Downloads MZ/PE file

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks