General

  • Target

    467af926472622448eb04925b9fa7351e8542f277f489ae792288829efa164dc.exe

  • Size

    10.2MB

  • Sample

    241002-bl1gaatdkd

  • MD5

    dee07aa8d86e695595b68cf2c6681afa

  • SHA1

    d148005293bab3854e4ceeee6d6628d5ef0784cf

  • SHA256

    467af926472622448eb04925b9fa7351e8542f277f489ae792288829efa164dc

  • SHA512

    402adef8e8f1ac8d8dd5772b560ac0508293893d38a36a422b9c6a55cb92de15b9ffb1bad98c6d98392433dfe02816f0b0844d1b593cc45142c89477355f1999

  • SSDEEP

    98304:GGoajuD127+C4b5oZSHgHoPUQ3HQg9W/Kyuj8yQD:/oaju6ZmHn3HQg9Sm8yQD

Score
10/10

Malware Config

Extracted

Family

lumma

Extracted

Family

lumma

C2

https://gravvitywio.store/api

Targets

    • Target

      467af926472622448eb04925b9fa7351e8542f277f489ae792288829efa164dc.exe

    • Size

      10.2MB

    • MD5

      dee07aa8d86e695595b68cf2c6681afa

    • SHA1

      d148005293bab3854e4ceeee6d6628d5ef0784cf

    • SHA256

      467af926472622448eb04925b9fa7351e8542f277f489ae792288829efa164dc

    • SHA512

      402adef8e8f1ac8d8dd5772b560ac0508293893d38a36a422b9c6a55cb92de15b9ffb1bad98c6d98392433dfe02816f0b0844d1b593cc45142c89477355f1999

    • SSDEEP

      98304:GGoajuD127+C4b5oZSHgHoPUQ3HQg9W/Kyuj8yQD:/oaju6ZmHn3HQg9Sm8yQD

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks