General

  • Target

    SecuriteInfo.com.Win32.CrypterX-gen.869.7164

  • Size

    577KB

  • Sample

    241012-lfmncatdpg

  • MD5

    c176313b73cb225cdf30935df4541b3d

  • SHA1

    383d2c973d98f8290934f2825853ff8bcb074700

  • SHA256

    16c1fbcec95d0c8fc26b4e491b8a89759ee10491992be8b8fc552ee4a18c87ad

  • SHA512

    c4f934a4fb6043f67bbb2cd009fa34aa3b72e496d67554ebc6bd3c70016306fb611a613a8bcec58fef9eab42b3bea8a1ceabe262e24bc671f6ccbeb66e851004

  • SSDEEP

    12288:qgEqNf5/GGDWs3nWad39FXuZIRAZ72hP8362GYNBA:cq5PDWs3pd9FUIRAEV17

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://clearancek.site

https://licendfilteo.site

https://spirittunek.store

https://bathdoomgaz.store

https://studennotediw.store

https://dissapoiznw.store

https://eaglepawnoy.store

https://mobbipenju.store

https://trustterwowqm.shop/api

Targets

    • Target

      SecuriteInfo.com.Win32.CrypterX-gen.869.7164

    • Size

      577KB

    • MD5

      c176313b73cb225cdf30935df4541b3d

    • SHA1

      383d2c973d98f8290934f2825853ff8bcb074700

    • SHA256

      16c1fbcec95d0c8fc26b4e491b8a89759ee10491992be8b8fc552ee4a18c87ad

    • SHA512

      c4f934a4fb6043f67bbb2cd009fa34aa3b72e496d67554ebc6bd3c70016306fb611a613a8bcec58fef9eab42b3bea8a1ceabe262e24bc671f6ccbeb66e851004

    • SSDEEP

      12288:qgEqNf5/GGDWs3nWad39FXuZIRAZ72hP8362GYNBA:cq5PDWs3pd9FUIRAEV17

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks