General

  • Target

    f5333380a4a7e1c682537b5a561f221cf522549ee28749c3c0f0ab53d27bc114N

  • Size

    361KB

  • Sample

    240927-b65azayfmn

  • MD5

    0222b09f904fff994a4bfd02f07e8520

  • SHA1

    906cc71070cce832b288b38b299b1fa9fe610404

  • SHA256

    f5333380a4a7e1c682537b5a561f221cf522549ee28749c3c0f0ab53d27bc114

  • SHA512

    52b3000f2ed422af8ee2b9fc059fd17d666480ef665be14a76a4a7fc9002bbef51195b3995301bea2c44f4a10d2a59e3aeedf74a79d046c497712255bdff1bec

  • SSDEEP

    6144:QELphU9UkXJpYKB1ka4x514B4z/8f0IX33CdYcoQvCIByMRYO39/RIv6U93zGs0Y:dLDwUk/lBP4ZT8fNX3ydYc1amSEd1GGs

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://strappystyio.shop/api

https://coursedonnyre.shop/api

https://fossillargeiw.shop/api

https://tendencerangej.shop/api

https://appleboltelwk.shop/api

https://tearrybyiwo.shop/api

https://captainynfanw.shop/api

https://surveriysiop.shop/api

Extracted

Family

lumma

C2

https://ballotnwu.site/api

Targets

    • Target

      f5333380a4a7e1c682537b5a561f221cf522549ee28749c3c0f0ab53d27bc114N

    • Size

      361KB

    • MD5

      0222b09f904fff994a4bfd02f07e8520

    • SHA1

      906cc71070cce832b288b38b299b1fa9fe610404

    • SHA256

      f5333380a4a7e1c682537b5a561f221cf522549ee28749c3c0f0ab53d27bc114

    • SHA512

      52b3000f2ed422af8ee2b9fc059fd17d666480ef665be14a76a4a7fc9002bbef51195b3995301bea2c44f4a10d2a59e3aeedf74a79d046c497712255bdff1bec

    • SSDEEP

      6144:QELphU9UkXJpYKB1ka4x514B4z/8f0IX33CdYcoQvCIByMRYO39/RIv6U93zGs0Y:dLDwUk/lBP4ZT8fNX3ydYc1amSEd1GGs

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks