General

  • Target

    1fc47b8f8713dea389054d96f8039e561c9ff19883fe870e437d54c2c8775d43

  • Size

    6.3MB

  • Sample

    240926-2gxgyathja

  • MD5

    558e0a291022baeb9586e446725861f4

  • SHA1

    deb32f5ab2deb479bc815b4a40fb47df5bfaf5a4

  • SHA256

    1fc47b8f8713dea389054d96f8039e561c9ff19883fe870e437d54c2c8775d43

  • SHA512

    71c932c61ced2a096ebbeeddbb6efe742af6341bc66ad770da2f17d9e98104a057964e1eba994f04dea6b0930a5e7c0dd66d95057e7f921e989a481f85b154d1

  • SSDEEP

    98304:7CVgPDH03+fHMb6rRhmSDV67GlFYkZoAbO:7CVgQW9/k7GbY/AbO

Malware Config

Extracted

Family

lumma

Extracted

Family

cryptbot

C2

analforeverlovyu.top

thirtvf13pt.top

Attributes
  • url_path

    /v1/upload.php

Targets

    • Target

      1fc47b8f8713dea389054d96f8039e561c9ff19883fe870e437d54c2c8775d43

    • Size

      6.3MB

    • MD5

      558e0a291022baeb9586e446725861f4

    • SHA1

      deb32f5ab2deb479bc815b4a40fb47df5bfaf5a4

    • SHA256

      1fc47b8f8713dea389054d96f8039e561c9ff19883fe870e437d54c2c8775d43

    • SHA512

      71c932c61ced2a096ebbeeddbb6efe742af6341bc66ad770da2f17d9e98104a057964e1eba994f04dea6b0930a5e7c0dd66d95057e7f921e989a481f85b154d1

    • SSDEEP

      98304:7CVgPDH03+fHMb6rRhmSDV67GlFYkZoAbO:7CVgQW9/k7GbY/AbO

    • CryptBot

      CryptBot is a C++ stealer distributed widely in bundle with other software.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks