General

  • Target

    injector V2.4.exe

  • Size

    366KB

  • Sample

    240928-kzfhpszdpf

  • MD5

    e49046b759ea17be2794ace6d9bb57d2

  • SHA1

    09cc2f51bf8669a7dae0f402f2aac9c28ee5221c

  • SHA256

    b84e4e4bd1d62794453dae477ea743422cf2b0c17bff17675916f85698fa03f9

  • SHA512

    4e9a8b224a9c513de485132ebd45cd75abf19605a3a7fb65ff714564c3c52fd43f81828d7978dce66bce292c99742ea4274607f452a19d6cf0a8e5fdefbf15aa

  • SSDEEP

    6144:SmlyeNhHSQckHU+S6JOzwCr84dnFD2sRwY+/MmKVHNTukpyT/U5a73:tSjCJfh1YwY+/1mHdukpGU5aL

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://reinforcenh.shop/api

https://stogeneratmns.shop/api

https://fragnantbui.shop/api

https://drawzhotdog.shop/api

https://vozmeatillu.shop/api

https://offensivedzvju.shop/api

https://ghostreedmnu.shop/api

https://gutterydhowi.shop/api

https://wallkedsleeoi.shop/api

Targets

    • Target

      injector V2.4.exe

    • Size

      366KB

    • MD5

      e49046b759ea17be2794ace6d9bb57d2

    • SHA1

      09cc2f51bf8669a7dae0f402f2aac9c28ee5221c

    • SHA256

      b84e4e4bd1d62794453dae477ea743422cf2b0c17bff17675916f85698fa03f9

    • SHA512

      4e9a8b224a9c513de485132ebd45cd75abf19605a3a7fb65ff714564c3c52fd43f81828d7978dce66bce292c99742ea4274607f452a19d6cf0a8e5fdefbf15aa

    • SSDEEP

      6144:SmlyeNhHSQckHU+S6JOzwCr84dnFD2sRwY+/MmKVHNTukpyT/U5a73:tSjCJfh1YwY+/1mHdukpGU5aL

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks