General

  • Target

    1e4a3417a80bdfa51cc0bddf896910f12f7ed5799bbb43ae3d25478222396ec2.exe

  • Size

    12.3MB

  • Sample

    240921-zl3teatapp

  • MD5

    01cc593a218359cf4a3b246daf10c330

  • SHA1

    d540859c613ad89e1a6589182a7ff104627b4ed3

  • SHA256

    1e4a3417a80bdfa51cc0bddf896910f12f7ed5799bbb43ae3d25478222396ec2

  • SHA512

    a527c03979e3146c6f4f7ad944977f329b7de7a549dfcde098654124fc65cb43a6f7b9a33e9a8805d06a8721023d253f2fbc4c71ea45e915bd20070efc461ef8

  • SSDEEP

    98304:mzbgb4upnSOH5hCQMbToFC5nVZV+LMpSw6ZfP+AF:fbLAOSdTGC8NfP+AF

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://riffledopspzio.shop/api

Targets

    • Target

      1e4a3417a80bdfa51cc0bddf896910f12f7ed5799bbb43ae3d25478222396ec2.exe

    • Size

      12.3MB

    • MD5

      01cc593a218359cf4a3b246daf10c330

    • SHA1

      d540859c613ad89e1a6589182a7ff104627b4ed3

    • SHA256

      1e4a3417a80bdfa51cc0bddf896910f12f7ed5799bbb43ae3d25478222396ec2

    • SHA512

      a527c03979e3146c6f4f7ad944977f329b7de7a549dfcde098654124fc65cb43a6f7b9a33e9a8805d06a8721023d253f2fbc4c71ea45e915bd20070efc461ef8

    • SSDEEP

      98304:mzbgb4upnSOH5hCQMbToFC5nVZV+LMpSw6ZfP+AF:fbLAOSdTGC8NfP+AF

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks