General

  • Target

    loader.exe

  • Size

    502KB

  • Sample

    240914-sjqyhazerj

  • MD5

    b8c9ebe29974dcb1dc86a2824761e81f

  • SHA1

    27f0f4b99d4d133202375676162772728e2a521d

  • SHA256

    bf5a7c45acb967fd5245aa00d88634aece445c298d783add2c5158b30ab726ac

  • SHA512

    b3d2a6781ddee7ca4a4011674105818a68025f820bc4b7bdb83097df7b0cd276d3b5b849c5cb669b10d048f7e99aa4951da51203fb98475e63f4e14babb14178

  • SSDEEP

    12288:gtGd6u3kxI05BOacVyXiIteS1D1wFobtFPFEuo8:gYb3owVydtFPFE1

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://benefictioraikiitso.xyz/api

https://singerreasonnbasldd.xyz/api

https://surprisedscaledowp.xyz/api

https://clerkpolicemandwusi.xyz/api

https://matterrydamagedowkds.xyz/api

https://fiondationkvowos.xyz/api

https://voyagedprivillywk.xyz/api

https://spitechallengddwlsv.xyz/api

https://varitycookypowerw.xyz/api

Targets

    • Target

      loader.exe

    • Size

      502KB

    • MD5

      b8c9ebe29974dcb1dc86a2824761e81f

    • SHA1

      27f0f4b99d4d133202375676162772728e2a521d

    • SHA256

      bf5a7c45acb967fd5245aa00d88634aece445c298d783add2c5158b30ab726ac

    • SHA512

      b3d2a6781ddee7ca4a4011674105818a68025f820bc4b7bdb83097df7b0cd276d3b5b849c5cb669b10d048f7e99aa4951da51203fb98475e63f4e14babb14178

    • SSDEEP

      12288:gtGd6u3kxI05BOacVyXiIteS1D1wFobtFPFEuo8:gYb3owVydtFPFE1

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks