General

  • Target

    WinFIG-2024.exe

  • Size

    799.3MB

  • Sample

    241001-md97asthrm

  • MD5

    e044c48da4a19d313909c961884b18da

  • SHA1

    01f278b3c0a7b73fc3200719b73327fbc4d4fe01

  • SHA256

    06277394f0ab7990297f24e2f0937c112edfcba5e8381ffe99591ad5e8f5089f

  • SHA512

    4db6dc6f2b8a9b5a6743b52854406ecc7272bbe3ca4f08b4ee5ce9c1c30f5e9e2d012203d93028f0473ee69811d38fa53da86e03d2124e67a253b7dc87b43602

  • SSDEEP

    196608:ddzRkzkyraJwGDPHUYGoq3F4wdg/QjOLLJtDpoheGErU50fM6jZy:Rqkyr0RDzDwdqkKltlgcVy

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://reinforcenh.shop/api

https://stogeneratmns.shop/api

https://fragnantbui.shop/api

https://drawzhotdog.shop/api

https://vozmeatillu.shop/api

https://offensivedzvju.shop/api

https://ghostreedmnu.shop/api

https://gutterydhowi.shop/api

https://pianoswimen.shop/api

Targets

    • Target

      WinFIG-2024.exe

    • Size

      799.3MB

    • MD5

      e044c48da4a19d313909c961884b18da

    • SHA1

      01f278b3c0a7b73fc3200719b73327fbc4d4fe01

    • SHA256

      06277394f0ab7990297f24e2f0937c112edfcba5e8381ffe99591ad5e8f5089f

    • SHA512

      4db6dc6f2b8a9b5a6743b52854406ecc7272bbe3ca4f08b4ee5ce9c1c30f5e9e2d012203d93028f0473ee69811d38fa53da86e03d2124e67a253b7dc87b43602

    • SSDEEP

      196608:ddzRkzkyraJwGDPHUYGoq3F4wdg/QjOLLJtDpoheGErU50fM6jZy:Rqkyr0RDzDwdqkKltlgcVy

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks