General

  • Target

    wgsinfo.exe

  • Size

    443KB

  • Sample

    240914-janbkstajh

  • MD5

    7406d32cfccce30de065c842900d18ed

  • SHA1

    80229a5cb68049a8a09b3856132e7bdc158f6b66

  • SHA256

    d22f01b9419600000791d208ae127b97f20cbd68d79490a0dd92bc34b886ddef

  • SHA512

    3aa7ffc97643156e0d53f61a190ef313f60ccd5990db089621a1adc87a7e2dbec34a815f4566c69c9592c08097066e7d8f3d0cbb07f3f31ff60d99905bc1b00c

  • SSDEEP

    12288:On39y0cLRppXgdwbQoRUCyW5FBT8OnEq5PwbseqCcBl:KKpXIwbQoRUNWt4OEq5

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://furtiveplastickdjw.shop/api

https://marathonbeedksow.shop/api

https://feighminoritsjda.shop/api

https://pleasurenarrowsdla.shop/api

https://falseaudiencekd.shop/api

https://raiseboltskdlwpow.shop/api

https://justifycanddidatewd.shop/api

https://strwawrunnygjwu.shop/api

https://richardflorespoew.shop/api

Targets

    • Target

      wgsinfo.exe

    • Size

      443KB

    • MD5

      7406d32cfccce30de065c842900d18ed

    • SHA1

      80229a5cb68049a8a09b3856132e7bdc158f6b66

    • SHA256

      d22f01b9419600000791d208ae127b97f20cbd68d79490a0dd92bc34b886ddef

    • SHA512

      3aa7ffc97643156e0d53f61a190ef313f60ccd5990db089621a1adc87a7e2dbec34a815f4566c69c9592c08097066e7d8f3d0cbb07f3f31ff60d99905bc1b00c

    • SSDEEP

      12288:On39y0cLRppXgdwbQoRUCyW5FBT8OnEq5PwbseqCcBl:KKpXIwbQoRUNWt4OEq5

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks