General

  • Target

    Loader.exe

  • Size

    567KB

  • Sample

    241012-zaqppszdlf

  • MD5

    cb50acc9b951b52306b95eaf8d4e2048

  • SHA1

    fd087d7b18d9dd37cb68f811f72de6c0dbbbfd31

  • SHA256

    16fd5c981d6da5cbd47293b35b0dd26c756493fe3f88d5613810a2f9b5159b39

  • SHA512

    a5c7fe0ddf98a79da2f369c0c104941c1ca626b7a61d0dbdc82853053240a941c4886add3788fed3c6c5fca89ea02ba2e933c5fca6cf44d52dd9eafd02d5af5c

  • SSDEEP

    12288:9nd8lywbKG/kz3lLEIfUN0YtUqifN0mCb0LwoMZJRv9qB+9lec8OGY5BA:99wW53lYIfM0fOzoLwoMZJR2+ve717

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://drawwyobstacw.sbs

https://condifendteu.sbs

https://ehticsprocw.sbs

https://vennurviot.sbs

https://resinedyw.sbs

https://enlargkiw.sbs

https://allocatinow.sbs

https://mathcucom.sbs

https://widdensmoywi.sbs

Targets

    • Target

      Loader.exe

    • Size

      567KB

    • MD5

      cb50acc9b951b52306b95eaf8d4e2048

    • SHA1

      fd087d7b18d9dd37cb68f811f72de6c0dbbbfd31

    • SHA256

      16fd5c981d6da5cbd47293b35b0dd26c756493fe3f88d5613810a2f9b5159b39

    • SHA512

      a5c7fe0ddf98a79da2f369c0c104941c1ca626b7a61d0dbdc82853053240a941c4886add3788fed3c6c5fca89ea02ba2e933c5fca6cf44d52dd9eafd02d5af5c

    • SSDEEP

      12288:9nd8lywbKG/kz3lLEIfUN0YtUqifN0mCb0LwoMZJRv9qB+9lec8OGY5BA:99wW53lYIfM0fOzoLwoMZJR2+ve717

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks