General

  • Target

    a6c705407a92616de7aef1575926326ccae242882ab6090114c9f2c3802ce689

  • Size

    10.8MB

  • Sample

    240912-svepls1eqf

  • MD5

    48ae9ac8148784f21faca97bdd04dc95

  • SHA1

    89771a02ed81bcaa0de3ee7c1074f9a027d4feaf

  • SHA256

    a6c705407a92616de7aef1575926326ccae242882ab6090114c9f2c3802ce689

  • SHA512

    af79c91cfa992d41ae4ccca5696de0c1df3a1c09d1732ede0c66e906562df74af84b484f84de45b7993876995087679463c39d3a8c49dd087a7530e6ca2a066d

  • SSDEEP

    196608:wJgwHcgFthnvmw8ShL0KrM7elrAnLOHHuncKILWMYLnS9L8dAfc/kdk2DX8I+XlW:wGw8gP1+w8oIKA0r/HOntImLSN88ikdH

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://complainnykso.shop/api

https://basedsymsotp.shop/api

https://charistmatwio.shop/api

https://grassemenwji.shop/api

https://stitchmiscpaew.shop/api

https://commisionipwn.shop/api

Targets

    • Target

    • Size

      752.8MB

    • MD5

      d77e9cb60a0b25d28b9041073f9ae2b4

    • SHA1

      abc1f1e9dc55bf9c4cadbb43e21f451fd10035d0

    • SHA256

      bffa8d4d3509f9af8531ee64e6f889ee11700f9684feddaa5c806439c6b876db

    • SHA512

      10d4fe0b15b3c790e37f85888ebbcaca77d018145f129084936b2a941a4f40b08e0fa2e35dc46edf57565b6426516a122c8d32b5febc2acd8bfdd4ce092ea695

    • SSDEEP

      196608:Ps4d7ZeXQ6vWpb1tHFSIjYwJS1QmpOOUjNSoisC2MqGXakykKg:dZGysuYX/AdjNfFqnyk1

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks