Overview

overview

10

Static

static

3

Full-Setup.exe

windows7-x64

1

Full-Setup.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Full-Setup.exe

  • Size

    13.8MB

  • Sample

    240929-rgqz2sxdlk

  • MD5

    18dfc09b7b86ea2b9d8e8276f7130d3f

  • SHA1

    0577086894c352cd228b96fbe5c939fdaed7816a

  • SHA256

    23aecd0e3f380420984c57e9b21c58e77340d445f07460971406c2e4cf81242a

  • SHA512

    eb6aed3d32194bda0fa340a5e606f22bdebd6c81bcd54505f0c69e5de4e9b2f3a487912efc9294c84c87d7652cede4f6b7b9a0a989586937217bad094020a934

  • SSDEEP

    98304:TlGmM6hlN+3ioV2t9ccxO/2mvnkdwyw0boOVJgw1KsKzOm66/o9oWKls8Ie:QmMkBY/vcdw70ZP1KNo9oV

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://reinforcenh.shop/api

https://stogeneratmns.shop/api

https://fragnantbui.shop/api

https://drawzhotdog.shop/api

https://vozmeatillu.shop/api

https://offensivedzvju.shop/api

https://ghostreedmnu.shop/api

https://gutterydhowi.shop/api

https://branchtriviawlek.shop/api

Extracted

Family

lumma

C2

https://branchtriviawlek.shop/api

https://chaptermusu.store/api

Targets

    • Target

      Full-Setup.exe

    • Size

      13.8MB

    • MD5

      18dfc09b7b86ea2b9d8e8276f7130d3f

    • SHA1

      0577086894c352cd228b96fbe5c939fdaed7816a

    • SHA256

      23aecd0e3f380420984c57e9b21c58e77340d445f07460971406c2e4cf81242a

    • SHA512

      eb6aed3d32194bda0fa340a5e606f22bdebd6c81bcd54505f0c69e5de4e9b2f3a487912efc9294c84c87d7652cede4f6b7b9a0a989586937217bad094020a934

    • SSDEEP

      98304:TlGmM6hlN+3ioV2t9ccxO/2mvnkdwyw0boOVJgw1KsKzOm66/o9oWKls8Ie:QmMkBY/vcdw70ZP1KNo9oV

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks