General

  • Target

    766c862096b22721c5f60321d4761b74

  • Size

    496KB

  • Sample

    240913-1j1fya1dmf

  • MD5

    766c862096b22721c5f60321d4761b74

  • SHA1

    fbf31d25f8d2389de9531ed93e5e6ec13cbe46c3

  • SHA256

    1ab7c28776f55c536099921afd7eec63f8134a939247262caa339ad0e6199570

  • SHA512

    40d3e7e8e048b4c8442617dab332569b3b92391178af13d61f783fc2fa8244449683973b7e985faf351e5c0fd6c31241d2a0eff16a4e8e1df127d6fda9d8ed66

  • SSDEEP

    12288:ihwDJWYVWgKUJSH1kr3MLuA3Qvr6kcNLaYkqCJJtJJCC855EO:iho7VWJmcNgr6HLwrnJCvDt

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://lineagelasserytailsd.shop/api

https://sofaprivateawarderysj.shop/api

https://tendencyportionjsuk.shop/api

https://headraisepresidensu.shop/api

https://appetitesallooonsj.shop/api

https://minorittyeffeoos.shop/api

https://prideconstituiiosjk.shop/api

https://smallelementyjdui.shop/api

Targets

    • Target

      766c862096b22721c5f60321d4761b74

    • Size

      496KB

    • MD5

      766c862096b22721c5f60321d4761b74

    • SHA1

      fbf31d25f8d2389de9531ed93e5e6ec13cbe46c3

    • SHA256

      1ab7c28776f55c536099921afd7eec63f8134a939247262caa339ad0e6199570

    • SHA512

      40d3e7e8e048b4c8442617dab332569b3b92391178af13d61f783fc2fa8244449683973b7e985faf351e5c0fd6c31241d2a0eff16a4e8e1df127d6fda9d8ed66

    • SSDEEP

      12288:ihwDJWYVWgKUJSH1kr3MLuA3Qvr6kcNLaYkqCJJtJJCC855EO:iho7VWJmcNgr6HLwrnJCvDt

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks