General

  • Target

    tera10.zip

  • Size

    31.7MB

  • Sample

    240911-tazdysyfmm

  • MD5

    5bc41c5837d829aec5bfb652bbd1485a

  • SHA1

    c7238e1940dfccb0e4dfb0270345bc147c4c8d7e

  • SHA256

    dbbd216b76dad718749c6468ee98ecafbfa464250f24c4445431c60d6af74a6f

  • SHA512

    0853565992f1bc12bee43a310a47d8f624caeb4dac274d333c7671a88f13c2c611ef7678490222e0672063b2f142b52caa904e9e91c2771df53aab0196e168f0

  • SSDEEP

    786432:/livvgg6ugvEwiLPoGJQF2kF1xEOGmVKGmVTGmVH:Nng6ugv9+QG3krGNG2Gm

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://forutnedmhiqo.shop/api

https://preachstrwnwjw.shop/api

https://complainnykso.shop/api

https://basedsymsotp.shop/api

https://charistmatwio.shop/api

https://grassemenwji.shop/api

https://stitchmiscpaew.shop/api

https://commisionipwn.shop/api

Targets

    • Target

      Setup.exe

    • Size

      94KB

    • MD5

      9a4cc0d8e7007f7ef20ca585324e0739

    • SHA1

      f3e5a2e477cac4bab85940a2158eed78f2d74441

    • SHA256

      040d121a3179f49cd3f33f4bc998bc8f78b7f560bfd93f279224d69e76a06e92

    • SHA512

      54636a48141804112f5b4f2fc70cb7c959a041e5743aeedb5184091b51daa1d1a03f0016e8299c0d56d924c6c8ae585e4fc864021081ffdf1e6f3eab11dd43b3

    • SSDEEP

      1536:9M/AhIxHHWMpdPa5wiE21M8kJIGFvb1Cwn/ZDs5yf:9M4SwMpdCq/IM8uIGfV/ZDso

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

    • Target

      python310.dll

    • Size

      4.3MB

    • MD5

      477264c48dbbc071190a6c7fc22cbb9c

    • SHA1

      128a085b84667420359bfd5b7bad0a431ca89e35

    • SHA256

      c28c1d76b1937373be1b5d5455e2accf3698c41cb3815d01209b232e82b6dae0

    • SHA512

      7a3b1af0f9ed76956cbce08621f04ec2f9fc097913f6f5ea49b45fcc84aff8962b7d0256267090643145abc6fd0571c7e7e1e7566469e565d101f9904d261b01

    • SSDEEP

      49152:LxWM30WEuKdhbvd9aCLYjiNME9KnPdZkAMnu08Mpc3MrOEJ8wwoJCzSy4I0mUHJp:LeV7bkwMVPZOHqzt0XHaMZqSH1Mze

    Score
    1/10
    • Target

      vcruntime140.dll

    • Size

      106KB

    • MD5

      49c96cecda5c6c660a107d378fdfc3d4

    • SHA1

      00149b7a66723e3f0310f139489fe172f818ca8e

    • SHA256

      69320f278d90efaaeb67e2a1b55e5b0543883125834c812c8d9c39676e0494fc

    • SHA512

      e09e072f3095379b0c921d41d6e64f4f1cd78400594a2317cfb5e5dca03dedb5a8239ed89905c9e967d1acb376b0585a35addf6648422c7ddb472ce38b1ba60d

    • SSDEEP

      1536:BcghDMWyjXZZIzpdbJhKm6Kuzu8fsecbq8uOFQr+zMtY+zA:BVHyQNdbJAKuzRsecbq8uOFvyU

    Score
    1/10
    • Target

      x64/Templates/TemplateCorreoCliente.htm

    • Size

      2KB

    • MD5

      ce4c1f3ba9e690c4119e8ed39aa8eb78

    • SHA1

      dc2da00c92b51431c01c5e598de4665c9989e856

    • SHA256

      e17621dc67919e53a0d1be6a03fa0d97f01c8932f8d8912d556327e620310432

    • SHA512

      daf95e6329b060fe230096fc7a594cf0a13801e2dcf9869affa5530a2d03bf6c0dd2d9340be5c312b82d41dad48057f86811a23b23fba93b0dc9a478986ac4ef

    Score
    3/10
    • Target

      x64/plugins/MahApps.Metro.IconPacks.BootstrapIcons.dll

    • Size

      2.1MB

    • MD5

      8a999c6c4b38e3afef0b54cbd84180c6

    • SHA1

      991b865b6dca9ead7d47dfb22faf584fea276044

    • SHA256

      73e67b8a6607064c314b0a5d72def055ae0599beae1e7073d7a10626543d7fd0

    • SHA512

      030fcb028335a62ea7c05053835c09016643bc2a941537a7a3dd97913cbc7f6c501e6ad3fb24fda4064d5ed08ed59702d911d7c9aa3f840e12e6db843464236d

    • SSDEEP

      6144:CTuzE29sK1y7RQNsMse5AV54EFdxtkYVBQoahtxDfzjADAW4vBM9jd2e+pT9IaRr:4uzEBA

    Score
    1/10
    • Target

      x64/plugins/MahApps.Metro.IconPacks.BoxIcons.dll

    • Size

      2.0MB

    • MD5

      c01837735db98ade25e996c8fec33bf6

    • SHA1

      626cc39c077942f70b72795e999a14d8729a7298

    • SHA256

      7b28873c6b729262f6f02ff2da46ca4aeaebcf3799eabd460bfbbf4a0fcf01ca

    • SHA512

      6bce692e3bc1304b518a9b47244af4e689ab81362906c3cebf732db0eced533bbf5c9f3a779614f6b258e087b7cbe762a37a68373b4749f7c30ec330984a6f05

    • SSDEEP

      12288:NbuZ0HSkOZo/IMCPY3sgUVhv9Rhz4iamcXw9320uVBi0KwxWjYyF:o

    Score
    1/10
    • Target

      x64/plugins/MahApps.Metro.IconPacks.Codicons.dll

    • Size

      559KB

    • MD5

      7f92130abd27092c78a3e075334bb75e

    • SHA1

      14f0cf7594d998d35762e7ada89143601b222613

    • SHA256

      a22950cc45540743ac0feae232c4cffeb25baa54ac3604765907e849ddad25ec

    • SHA512

      68e23a47a5700dd84ab6b602842d723056cc26db12a7d70336da4c5ee0372cd95883da7232a2527fea21669f82fc1a44afb647b6bf25084dd78174e25ed724f0

    • SSDEEP

      6144:2tdYnKgBzqqrTzWBzqqrUzQ7M1L1MyzpmeJ4O:26O

    Score
    1/10
    • Target

      x64/plugins/MahApps.Metro.IconPacks.Coolicons.dll

    • Size

      451KB

    • MD5

      14f3f599e7a67c95d779820dba5a9fff

    • SHA1

      b88ea6caa09ecf11d2e6dbae039ab0734a823345

    • SHA256

      213956439f1d224be2f78ae9a345e2c02902750cd83a4a0439234afe801e75e5

    • SHA512

      e295ab8f8d90208f6a41320868d73a225a12bedc15591f2a19103a659fb437016ebded0c8fd62c61db3a8dadaafb07565cb76a51fd4113acd20cd568e36807a2

    • SSDEEP

      6144:Psu6HHHYtONor0Gw90Lx5FkbrawYhhGqlQz08aWFe/HD6TYm5oE3e3FsPgiu9g3z:P1774BfdWECoBmW

    Score
    1/10
    • Target

      x64/plugins/MahApps.Metro.IconPacks.Core.dll

    • Size

      19KB

    • MD5

      b705c478c096ef8ea4fc0738d52d1c84

    • SHA1

      44ec80a1259df99ac06cc342b03ca0fb9db22faf

    • SHA256

      b6156814d7014a38587991b19eec9228439bc0b2558cfa9bedb4e72ac611fccb

    • SHA512

      f212cde6c87920b3ee6e588c473987646c3f6ddca4b2122dd876ff61815dc7dccbbcb469024fd50cb0f3e1829643859e3eec4c8a91442056624c6f5922344b35

    • SSDEEP

      384:feCnIM4AZxFYzXKZHqwAodV5rroIYJFzcQ8tFq3qs6jUasojg4APsTTlj5a6wIYU:feu4RIDfov4bFyUjUnWsKGVD6

    Score
    1/10
    • Target

      x64/plugins/MahApps.Metro.IconPacks.Entypo.dll

    • Size

      490KB

    • MD5

      60aaa132d1992d132f7fbaef8cd0ccb3

    • SHA1

      6f7d9226d195efed993cae4a2ea447e125ce1d23

    • SHA256

      1017345eeae7e6df2b894c36ebad15f469474ca612749c9e1865126175c74364

    • SHA512

      1e82f82144674cf5591a1ead06f8d37b5dad11f16114c70664cd2891f6b32ef23ae543e34320105407e57d48543faa2286a8d8ff21dfa7076be3c18808d3a3ea

    • SSDEEP

      6144:5bworP4b71rPwhET9FDsBGZfiqJMUlOv5CuwVpKex7byEZAzftaDi/KAFwrSmfLM:9wKRLLKACX2m

    Score
    1/10
    • Target

      x64/plugins/MahApps.Metro.IconPacks.EvaIcons.dll

    • Size

      416KB

    • MD5

      721f37645c32653200b06969419344b2

    • SHA1

      ba5a3868632e98adef61c7a2999e726881eca4a7

    • SHA256

      14d31cdf80fab1df0f874e4f8d8090b5393b6ffac6cd86dfb5c71dd8f62f4e93

    • SHA512

      f3d8375d2df69fce7e4dbff68295281a94cdce9de86ef52aa951c7d2ff8cad48777a76192d6a20f0b804b307d48914f66fcff7bc25da2ab946de456079db59db

    • SSDEEP

      3072:esRQOZCZi9zOr8G2OIC5kXgRXgFmrUjwD:/RQwLbmW+

    Score
    1/10
    • Target

      x64/plugins/MahApps.Metro.IconPacks.FeatherIcons.dll

    • Size

      106KB

    • MD5

      0cb966a395147c28dd9abf5482ae64fc

    • SHA1

      81a657e20670a8cb120270047cae1f552ba40100

    • SHA256

      fa81d23b3ebf44d72897d673dfd750ae764de32d8d05888e77d80018e041156b

    • SHA512

      e58f13389f8e229ad44625320948f8fe1cbf469980c8774c1f8ecd4228edd8039af3e361ccec91ae011460801169eb85e8aa1eebe2be2282cb8b6d7944c36f2f

    • SSDEEP

      3072:7QVRLunLLLaDLQv4xLi/CLU9d+AHXkusnqyKM/6dNzj23T2rB6ibsKwGv6mBhZQ:AikuVdNzj23Vmbe

    Score
    1/10
    • Target

      x64/plugins/MahApps.Metro.IconPacks.FileIcons.dll

    • Size

      2.5MB

    • MD5

      7505de114074730c17bfdca7e7c5657d

    • SHA1

      72285ce3d75c803a4f2cb7244dbc5f6ea6b6e7c2

    • SHA256

      6b876cc6e22e1bb6a9a7bc862c043aa49926760714a6d92122e436b561a659cb

    • SHA512

      10cf63aa781d948b07d4bfb02fc66c5b72328d9fb9f8e6d4b5816c54851777f8e276b196693b17a14998f21387cdd030fd2bda067c0547fca366e651397cd65a

    • SSDEEP

      12288:Z88jUgEwEUkTS0B2gO32lSYGVHfkbuBzNl6iK4LbBzuqbBuQ0bCLf7PQGI0iFzmk:jhxyU

    Score
    1/10
    • Target

      x64/plugins/MahApps.Metro.IconPacks.FontAwesome.dll

    • Size

      2.3MB

    • MD5

      5214c8c29b814c62a89424429933d78e

    • SHA1

      ae62844a871389cfa1f36152621d896286f67872

    • SHA256

      dbf78865859b0776df2458aa7f490d66e1b54104873063e99f4b9a4d9d59accc

    • SHA512

      bbb9a7ecbb95170a409b31a73ecb875938bf8ba29d5b470764208b9d6a41f447d23958f907d1a871218567186e78f4175ebd2a08112e26c1c8c99af29c8dc535

    • SSDEEP

      24576:fojPJMpMIU11zYHfa//KM6sA/lUPKHMhY+4Pv6P/Mzk6A/MBn/MBY6k94PEeB7Bc:fojPJMu

    Score
    1/10
    • Target

      x64/plugins/MahApps.Metro.IconPacks.Fontaudio.dll

    • Size

      398KB

    • MD5

      086160aa7449ea0d3c89393289d6cf3c

    • SHA1

      f0fd895ced7e9c2c96943754bebd66fefe6f9595

    • SHA256

      8d6da96f5612060f6ebdd76874c5dc52528665664f148d290697bf12cf884c3d

    • SHA512

      85a4472f1b7b49a2512a5ac046fc7c6f501f4ded12671b94f02dbe424146852160c4aa19254aee6fc435e2ecb3547378ff2d484d00f9f882e79399a1470d303a

    • SSDEEP

      3072:4KbKfVf+WDio/2G8K0b1+oxzsf+RSyXQfKZsyQQv0VndywQImZXZsU2ynIySoAYk:72ioilfc5dywHmZJt2SSCOROSJPmlu

    Score
    1/10
    • Target

      x64/plugins/MahApps.Metro.IconPacks.Fontisto.dll

    • Size

      2.7MB

    • MD5

      3e3f7e5dec93557b5c00e750b008dc23

    • SHA1

      bf0fa3e913e15c2090caa238361094029d3e1de2

    • SHA256

      98fdfd6e8fabd67e9af84453f4942333002d809f45184b04db04060d61dc40ba

    • SHA512

      331f867a0fdc51bfd8506c4d70f6cb867c90b122632e4392a59b0321fb8f51b4d840540f7029f30bef87bc72e92b51031ff9c522670082ebe97001bb6091ff5d

    • SSDEEP

      12288:0KlPHWdRGyp9TZhvbfN8Meppp/z5RTl215hG9g7wJDZNsJ6TmGpkNOFEIH7/deH5:0Klz77FG

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

Score
1/10

behavioral2

lummadiscoverystealer
Score
10/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10