General

  • Target

    2024-09-12_c38f34070dba4a37add078ad90b44186_poet-rat_snatch

  • Size

    34.6MB

  • Sample

    240912-qt7mwsxang

  • MD5

    c38f34070dba4a37add078ad90b44186

  • SHA1

    8314168eb3b3ab09d3c4c717a8db682c163b2bdd

  • SHA256

    13667772ca04aff1e9a4a83453e612752dc242b5f247d381ddbd31eccfdd6e4a

  • SHA512

    47acf8f7bcd2f3cba7713f5d990c1b3626e18595633cc60506ccd209448fbbd4ce65172c262d602fa3431cceb0deb8963d3197fce1d47a3cdf1d4433b64ec3dd

  • SSDEEP

    196608:RR+LmXmPgXgeNzfdnCvh0074RHVGuLNnnLCSdQkAr9nTlw9GZPH17F0:7AUgeNwYVGYnLC63AhnRB517F0

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://complainnykso.shop/api

https://basedsymsotp.shop/api

https://charistmatwio.shop/api

https://grassemenwji.shop/api

https://stitchmiscpaew.shop/api

https://commisionipwn.shop/api

Targets

    • Target

      2024-09-12_c38f34070dba4a37add078ad90b44186_poet-rat_snatch

    • Size

      34.6MB

    • MD5

      c38f34070dba4a37add078ad90b44186

    • SHA1

      8314168eb3b3ab09d3c4c717a8db682c163b2bdd

    • SHA256

      13667772ca04aff1e9a4a83453e612752dc242b5f247d381ddbd31eccfdd6e4a

    • SHA512

      47acf8f7bcd2f3cba7713f5d990c1b3626e18595633cc60506ccd209448fbbd4ce65172c262d602fa3431cceb0deb8963d3197fce1d47a3cdf1d4433b64ec3dd

    • SSDEEP

      196608:RR+LmXmPgXgeNzfdnCvh0074RHVGuLNnnLCSdQkAr9nTlw9GZPH17F0:7AUgeNwYVGYnLC63AhnRB517F0

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks