General

  • Target

    59cbdbc57cfd1a2b8014a0572001ee5583856c7479539305110dd5ee09d77d7f.exe

  • Size

    4.1MB

  • Sample

    241002-bnhdgszdlm

  • MD5

    d05c315bfc43e4fada8c526f3de82f22

  • SHA1

    03a590dcc3658a1740fca4d9903843caef294bb0

  • SHA256

    59cbdbc57cfd1a2b8014a0572001ee5583856c7479539305110dd5ee09d77d7f

  • SHA512

    5ca118d69dee84ad62958a2ed67635e6633e6eacf9259c12f33cead524973c7c918191066f8135d5d797b211d948c85ecb625f6631a5ccd87c2922858b02590a

  • SSDEEP

    49152:HxVmP9GK+fo/YfrflpR68K9AXOsnjC6Fcp91ND0b8:Rg0K+fo/Exh1GzJNAb8

Score
10/10

Malware Config

Extracted

Family

lumma

Extracted

Family

lumma

C2

https://gravvitywio.store/api

Targets

    • Target

      59cbdbc57cfd1a2b8014a0572001ee5583856c7479539305110dd5ee09d77d7f.exe

    • Size

      4.1MB

    • MD5

      d05c315bfc43e4fada8c526f3de82f22

    • SHA1

      03a590dcc3658a1740fca4d9903843caef294bb0

    • SHA256

      59cbdbc57cfd1a2b8014a0572001ee5583856c7479539305110dd5ee09d77d7f

    • SHA512

      5ca118d69dee84ad62958a2ed67635e6633e6eacf9259c12f33cead524973c7c918191066f8135d5d797b211d948c85ecb625f6631a5ccd87c2922858b02590a

    • SSDEEP

      49152:HxVmP9GK+fo/YfrflpR68K9AXOsnjC6Fcp91ND0b8:Rg0K+fo/Exh1GzJNAb8

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks