General

  • Target

    9fdc598dd676125e0a98c9e48b5028263b05aaaa69b219830d63e4c8ea05bf9d.exe

  • Size

    15.1MB

  • Sample

    241005-b5drmasejb

  • MD5

    a72dca4f9a66cf77e4179d8ff5e61007

  • SHA1

    614eec1e3d691603a372f7cea6cbec7b327890ff

  • SHA256

    9fdc598dd676125e0a98c9e48b5028263b05aaaa69b219830d63e4c8ea05bf9d

  • SHA512

    bb76d9bedec9cc658b851f2191c6e5f68a49390b49872f82e53a9bb6c936b3d4eef09df0bf7b06a9980b0257374cec3d4c812aa6d1b8c3a7263f92d4261776ea

  • SSDEEP

    98304:Y1VYrykxEz2vnpwmrtUzuBMvOAVkrC53VvyHINJbRHo+ADH6etFy4K7vnNCM9:tHxEcNcvVQIVA78CM9

Score
10/10

Malware Config

Extracted

Family

lumma

Extracted

Family

lumma

C2

https://mobbipenju.store/api

https://eaglepawnoy.store/api

https://dissapoiznw.store/api

https://studennotediw.store/api

https://bathdoomgaz.store/api

https://spirittunek.store/api

Targets

    • Target

      9fdc598dd676125e0a98c9e48b5028263b05aaaa69b219830d63e4c8ea05bf9d.exe

    • Size

      15.1MB

    • MD5

      a72dca4f9a66cf77e4179d8ff5e61007

    • SHA1

      614eec1e3d691603a372f7cea6cbec7b327890ff

    • SHA256

      9fdc598dd676125e0a98c9e48b5028263b05aaaa69b219830d63e4c8ea05bf9d

    • SHA512

      bb76d9bedec9cc658b851f2191c6e5f68a49390b49872f82e53a9bb6c936b3d4eef09df0bf7b06a9980b0257374cec3d4c812aa6d1b8c3a7263f92d4261776ea

    • SSDEEP

      98304:Y1VYrykxEz2vnpwmrtUzuBMvOAVkrC53VvyHINJbRHo+ADH6etFy4K7vnNCM9:tHxEcNcvVQIVA78CM9

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks