General

  • Target

    2024-09-08_157285d52451f1fb8994de805c49103f_poet-rat_snatch

  • Size

    13.4MB

  • Sample

    240908-kcmcqswbjn

  • MD5

    157285d52451f1fb8994de805c49103f

  • SHA1

    fb4efc009c4675e7a3a1dcab7b6d3414e8c6283e

  • SHA256

    78c9b9ff2baa00a98e1a16132f9130010506c997404c8b2b3c3db07971b7f790

  • SHA512

    4ce66b9c7b855e9b029304ffb90bec16ac8576d3b04f5c0d002901b054d7fab2cd7f915b73c92eedb64e43fdbfcee51ab3a597a58aaaa814c7854706650713bc

  • SSDEEP

    98304:/n4woD76tBuVIxuRZLDIaYefEHL2Z1+mGl:/FBuW0fDeHq0mG

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://professinowpqqz.shop/api

https://condedqpwqm.shop/api

Targets

    • Target

      2024-09-08_157285d52451f1fb8994de805c49103f_poet-rat_snatch

    • Size

      13.4MB

    • MD5

      157285d52451f1fb8994de805c49103f

    • SHA1

      fb4efc009c4675e7a3a1dcab7b6d3414e8c6283e

    • SHA256

      78c9b9ff2baa00a98e1a16132f9130010506c997404c8b2b3c3db07971b7f790

    • SHA512

      4ce66b9c7b855e9b029304ffb90bec16ac8576d3b04f5c0d002901b054d7fab2cd7f915b73c92eedb64e43fdbfcee51ab3a597a58aaaa814c7854706650713bc

    • SSDEEP

      98304:/n4woD76tBuVIxuRZLDIaYefEHL2Z1+mGl:/FBuW0fDeHq0mG

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks