lumma | 779af30a96547bc09e9ac5295068bef19a78d46f09e590adccad5e51654bd56a

General

Target

2024-09-28_b8d9c84227cc48da4d1307cda602ad10_poet-rat_snatch
Size

11.7MB
Sample

240928-rw3bmazhrk
MD5

b8d9c84227cc48da4d1307cda602ad10
SHA1

27f56e30b767489ee7a906fa2d522c6091e1e8f5
SHA256

779af30a96547bc09e9ac5295068bef19a78d46f09e590adccad5e51654bd56a
SHA512

03110905206cd59dc34d43c5c75a7bb825f1c5bc42f2f79df24e11220b63c5eeb2e66b669a921bde98caaa825aea9bd968aa335013226cd3104837fae17417ef
SSDEEP

49152:HYQFGxSQnAdfK6CwiZdu19Gcxw7+gQCtITzodEzlD3resQ4n+SF+3q13bzJTojvn:ZFOSQnKZgywpEzFesn9L61XEYD6

Score

10^/10

Malware Config

Extracted

Family

lumma

C2

https://covvercilverow.shop/api

https://surroundeocw.shop/api

https://abortinoiwiam.shop/api

https://pumpkinkwquo.shop/api

https://priooozekw.shop/api

https://deallyharvenw.shop/api

https://defenddsouneuw.shop/api

https://racedsuitreow.shop/api

https://perforatedmwqn.shop/api

Extracted

Family

lumma

C2

https://perforatedmwqn.shop/api

Targets

- Target
  
  2024-09-28_b8d9c84227cc48da4d1307cda602ad10_poet-rat_snatch
- Size
  
  11.7MB
- MD5
  
  b8d9c84227cc48da4d1307cda602ad10
- SHA1
  
  27f56e30b767489ee7a906fa2d522c6091e1e8f5
- SHA256
  
  779af30a96547bc09e9ac5295068bef19a78d46f09e590adccad5e51654bd56a
- SHA512
  
  03110905206cd59dc34d43c5c75a7bb825f1c5bc42f2f79df24e11220b63c5eeb2e66b669a921bde98caaa825aea9bd968aa335013226cd3104837fae17417ef
- SSDEEP
  
  49152:HYQFGxSQnAdfK6CwiZdu19Gcxw7+gQCtITzodEzlD3resQ4n+SF+3q13bzJTojvn:ZFOSQnKZgywpEzFesn9L61XEYD6
Score

10^/10

discovery lumma stealer
- Lumma Stealer, LummaC
  Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
  stealer lumma
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Extracted

Targets

Lumma Stealer, LummaC

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2