General

  • Target

    Installer.exe

  • Size

    554KB

  • Sample

    240914-mdbczayern

  • MD5

    0886f39e11cab337f981e62aa418f34a

  • SHA1

    a2a33932bfc25ddd30c166accb51d1b978c10e00

  • SHA256

    9ffaedc9f7c3b87c919f52b7ca8ba7729c1b9ea5728b49f2a527c9f587ee2f53

  • SHA512

    d500856893e8a6f3285aec4431e0477690f86b041db1ef1edfb5531c7bcdb199e747b4eae590b4e95015e5113f76d6264bc22ead80336a5e28bfbb2b130e255a

  • SSDEEP

    12288:4ffsBGLPMaHe27cwDhB7gbUCeZO/6h3CsYUyM8gXXV04PRKT02/0AcXhFrzO6Ny8:4nsBGLUaHe27cCh

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://distincttangyflippan.shop/api

https://macabrecondfucews.shop/api

https://greentastellesqwm.shop/api

https://stickyyummyskiwffe.shop/api

https://sturdyregularrmsnhw.shop/api

https://lamentablegapingkwaq.shop/api

https://innerverdanytiresw.shop/api

https://standingcomperewhitwo.shop/api

Targets

    • Target

      Installer.exe

    • Size

      554KB

    • MD5

      0886f39e11cab337f981e62aa418f34a

    • SHA1

      a2a33932bfc25ddd30c166accb51d1b978c10e00

    • SHA256

      9ffaedc9f7c3b87c919f52b7ca8ba7729c1b9ea5728b49f2a527c9f587ee2f53

    • SHA512

      d500856893e8a6f3285aec4431e0477690f86b041db1ef1edfb5531c7bcdb199e747b4eae590b4e95015e5113f76d6264bc22ead80336a5e28bfbb2b130e255a

    • SSDEEP

      12288:4ffsBGLPMaHe27cwDhB7gbUCeZO/6h3CsYUyM8gXXV04PRKT02/0AcXhFrzO6Ny8:4nsBGLUaHe27cCh

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks