General

  • Target

    159d1a03e0c4ba22defc9aa86a6ef0d96092a76f14a25fd830777dad19b87813.exe

  • Size

    27.4MB

  • Sample

    240915-kjge3avcpb

  • MD5

    5ac48cc676d4a0ed353a4e796a6bb5cb

  • SHA1

    d7d1632619c6d98adbf08e19ac0160f2b94991b4

  • SHA256

    159d1a03e0c4ba22defc9aa86a6ef0d96092a76f14a25fd830777dad19b87813

  • SHA512

    4b63e1b0edd6812ffb21e3f644c185f54f3ca7b87a73940bbb7d3b0cb19f804f9b42d3226e4ae72c95eb63aee14f2762cb936da5df4f04a30f40c555ec035de3

  • SSDEEP

    196608:o6yygndTTwyywpplUDVoCICzYL6i+qWiHo:btgndcmp+poCIcYLx+WH

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://femininedspzmhu.shop/api

Targets

    • Target

      159d1a03e0c4ba22defc9aa86a6ef0d96092a76f14a25fd830777dad19b87813.exe

    • Size

      27.4MB

    • MD5

      5ac48cc676d4a0ed353a4e796a6bb5cb

    • SHA1

      d7d1632619c6d98adbf08e19ac0160f2b94991b4

    • SHA256

      159d1a03e0c4ba22defc9aa86a6ef0d96092a76f14a25fd830777dad19b87813

    • SHA512

      4b63e1b0edd6812ffb21e3f644c185f54f3ca7b87a73940bbb7d3b0cb19f804f9b42d3226e4ae72c95eb63aee14f2762cb936da5df4f04a30f40c555ec035de3

    • SSDEEP

      196608:o6yygndTTwyywpplUDVoCICzYL6i+qWiHo:btgndcmp+poCIcYLx+WH

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks