General

  • Target

    b87ef5f2289241d1f437924bee4cccfbb16554a6a71d23f6fd930ff5c7c30dd8.exe

  • Size

    4.7MB

  • Sample

    241002-bx9t4azhrk

  • MD5

    b82c3d4143ea779b06ef4fbc965db624

  • SHA1

    52172ad1a88ea85f679d8bf13f2567145a64f24b

  • SHA256

    b87ef5f2289241d1f437924bee4cccfbb16554a6a71d23f6fd930ff5c7c30dd8

  • SHA512

    561dc26a6ea6fb0694af632fe4ba8aef927d8e1c0159ea5d8d72c45cf50cf522d3296c7382eda1891746202feacac6ae5e17cbd8502dc1b09926f0a7023593fa

  • SSDEEP

    49152:MRTNHl10MKCLvJpx2CmAtIh5aGBLWAHrLPjQd4R+j0kYHuE36+OhS0gxf30F5cEC:oTNHl7d2Hd5lXHpKvhgZkF5

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://tryyudjasudqo.shop/api

https://eemmbryequo.shop/api

https://reggwardssdqw.shop/api

https://relaxatinownio.shop/api

https://tesecuuweqo.shop/api

https://tendencctywop.shop/api

https://licenseodqwmqn.shop/api

https://keennylrwmqlw.shop/api

Extracted

Family

lumma

C2

https://gravvitywio.store/api

Targets

    • Target

      b87ef5f2289241d1f437924bee4cccfbb16554a6a71d23f6fd930ff5c7c30dd8.exe

    • Size

      4.7MB

    • MD5

      b82c3d4143ea779b06ef4fbc965db624

    • SHA1

      52172ad1a88ea85f679d8bf13f2567145a64f24b

    • SHA256

      b87ef5f2289241d1f437924bee4cccfbb16554a6a71d23f6fd930ff5c7c30dd8

    • SHA512

      561dc26a6ea6fb0694af632fe4ba8aef927d8e1c0159ea5d8d72c45cf50cf522d3296c7382eda1891746202feacac6ae5e17cbd8502dc1b09926f0a7023593fa

    • SSDEEP

      49152:MRTNHl10MKCLvJpx2CmAtIh5aGBLWAHrLPjQd4R+j0kYHuE36+OhS0gxf30F5cEC:oTNHl7d2Hd5lXHpKvhgZkF5

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks