General

  • Target

    f944260a83df5ac58eff1a29b79135b62ab38b22df94f7fd7f012c819d47ab12

  • Size

    6.3MB

  • Sample

    240905-kztqbswhpk

  • MD5

    010afde39630628bb3a813d18e1f158e

  • SHA1

    b193c3de6891e04b085dc50ff078560f7833db68

  • SHA256

    f944260a83df5ac58eff1a29b79135b62ab38b22df94f7fd7f012c819d47ab12

  • SHA512

    b0fb9bc316ab0703dacca6a18136c2810acb04bd69c9fb029713e4b13dda3574113ebbc9059134571cf344dd505c8b4dc88573aa9e7543083cced3b4aed179ad

  • SSDEEP

    98304:LfqOGhuproVayD9jQOqfda3bEkS7L0Yrh7auHMfoQf8siQg6+9frPw6MQa2pCVU4:L/GoqDDCOJZQlarQ6SrPgQLpqI1s9sM

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://greetycruthsuo.shop/api

https://condedqpwqm.shop/api

Targets

    • Target

      0VCartoonizer_Trial.exe

    • Size

      16.0MB

    • MD5

      1491fde71a72c411941e4f457589e180

    • SHA1

      302946889bb43538ad2c2d5a644123ad2fbbca69

    • SHA256

      8dd53f8f2686cb3946bec35e46ff067ec4b94f789f48db0f823b1633ee39a633

    • SHA512

      d21250b4d7065511d6df273f8d3bada1d56cc3a969c334062b6e8167faa06c099dbc8209cc7c423ba30bc53d93ff4329235151c8c26ac6a3f3eeed7335567424

    • SSDEEP

      98304:yBRT9Dey62EBcIMghQ8OjuyenJaoWxJEbisDNGPhssr7Ut/QYIano2OUvDXWQyng:gp+DpSqQoWbE/5srTY5qROb

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks