General

  • Target

    VALORANT Cheat.zip

  • Size

    20.1MB

  • Sample

    241015-ap7jbstfrd

  • MD5

    b1b424868894c44c65d9eb07f600b4dd

  • SHA1

    d24c0a5fbbbc27ea0fb88317780f2bb9d9716f86

  • SHA256

    12cfa9c4dd42d75f856d4c798cbadb167a4d7456c1c65c9558ab852eac52b7b9

  • SHA512

    ea3707bbf8cd8d1ef4e6899967d80793d5d6787f2db86c0ade55ef58d6032979de3e1cb48a2be19136d701875b7e77859a06844486915ca535babf9b824d9d39

  • SSDEEP

    393216:COCMj1RUE3bUXOb5xklPBCNyYzW9t8svlUhnwXG3+iho0r4nMrJzF:COL7rUSbGYO9WPh6tK4neJx

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://drawwyobstacw.sbs

https://condifendteu.sbs

https://ehticsprocw.sbs

https://vennurviot.sbs

https://resinedyw.sbs

https://enlargkiw.sbs

https://allocatinow.sbs

https://mathcucom.sbs

https://widdensmoywi.sbs

Targets

    • Target

      VALORANT Cheat.zip

    • Size

      20.1MB

    • MD5

      b1b424868894c44c65d9eb07f600b4dd

    • SHA1

      d24c0a5fbbbc27ea0fb88317780f2bb9d9716f86

    • SHA256

      12cfa9c4dd42d75f856d4c798cbadb167a4d7456c1c65c9558ab852eac52b7b9

    • SHA512

      ea3707bbf8cd8d1ef4e6899967d80793d5d6787f2db86c0ade55ef58d6032979de3e1cb48a2be19136d701875b7e77859a06844486915ca535babf9b824d9d39

    • SSDEEP

      393216:COCMj1RUE3bUXOb5xklPBCNyYzW9t8svlUhnwXG3+iho0r4nMrJzF:COL7rUSbGYO9WPh6tK4neJx

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    • Target

      Qt5Network.dll

    • Size

      1.3MB

    • MD5

      c24c89879410889df656e3a961c59bcc

    • SHA1

      25a9e4e545e86b0a5fe14ee0147746667892fabd

    • SHA256

      739bedcfc8eb860927eb2057474be5b39518aaaa6703f9f85307a432fa1f236e

    • SHA512

      0542c431049e4fd40619579062d206396bef2f6dadadbf9294619c918b9e6c96634dcd404b78c6045974295126ec35dd842c6ec8f42279d9598b57a751cd0034

    • SSDEEP

      24576:HO51NG2bq1mhQpCR4SSUVxiKZiva+su3pUlSuMEFR+PoT0lqU:34hQoRpSUVYKZqvsu3pUlNMEePoT0E

    Score
    1/10
    • Target

      Qt5Positioning.dll

    • Size

      319KB

    • MD5

      fb45f544d61c6a0a66e7ad3f5c0508b1

    • SHA1

      50331a21dd2db624a559fa7ec5d3a0d93b8944ae

    • SHA256

      e42297b688986f0e6dba17ae82a5d78cba1139bc03a0c30fbb6a6ef6c7f557ca

    • SHA512

      3419f317f34f29996e8e139fe1725c9568bb262ab895a110be925b324fa3703e9a61a29e19b0b18e36cce31008353b9a9f80064b90aac7c16b05f544749e243a

    • SSDEEP

      6144:zL3H526yykA6d0DbxzdMJ6EXmD2AOoLf:v3HWBo4J6W

    Score
    1/10
    • Target

      Qt5PrintSupport.dll

    • Size

      312KB

    • MD5

      dbf79abfb2fe2490fddfcc5b142326b9

    • SHA1

      8955c5169f62b643a53920607c1392c049d180c2

    • SHA256

      a4869f741088c67a0b449edad15658a9cf1edd8b693e4b23b6172952b6a7f9bf

    • SHA512

      424ff210400a77876fdc6eb87ca245bb475151ebf2656a5e36ee77fe27ff4cbb5f30cd608a0cdf5113fffcaa00398de2e758a1721e7154585a230e53981b6051

    • SSDEEP

      6144:SU6GcHAzLDN8xBznXwgUA2GqWss4A+1gr7pGZmSUbZqXxtUPIsq5okoibIWBk7fB:F6zqLDN8v

    Score
    1/10
    • Target

      Qt5Qml.dll

    • Size

      3.6MB

    • MD5

      27e0d9b1fd02d19a8745459bd729926f

    • SHA1

      fee35bd148db2a9eb410f3c8f5c9a216be0d6d18

    • SHA256

      53e8fecd7d4b1b74064eba9bfa6a361d52929f440954931b4ba65615148bf0ea

    • SHA512

      aef0caeff970629a6cce00766139a407ac8e7c1179e5dbac1e01e252725f25a6fa771a7bb0cdcb894394b1ee7cff323511fb1eb64901d0c959fe2203d132ecc6

    • SSDEEP

      98304:9myruPbjj6ODMIuT/IRhF/dNjnvkHrNrSdSG779LLLS/o/L4YqoY0Xba+mRR+:9druTjj6ODMIuT/IRhF/dNjnvk

    Score
    1/10
    • Target

      Qt5QmlModels.dll

    • Size

      430KB

    • MD5

      51addd243d4acbf6e2704b207dfe40b2

    • SHA1

      acbc43b8480c1d8884d1b096d66a2ed678318b06

    • SHA256

      1ac4753056179b358132c55ca3086d550849ae30259ba94f334826c2fbf6c57e

    • SHA512

      c8aec4b704ee70bef16c71b1aded727e3a289831c4cc8f3cb276813e3f2ea1d96f3ff8529dee5ead46eb889206b4a3b4d2e468827fa833831ac69f43cc797064

    • SSDEEP

      6144:s/VXP0g95T6gCk3Ud7Bz+vccX+Wl+tmYZ2u8ruxJM:s/j95TfBI4h7FuL

    Score
    1/10
    • Target

      Qt5QmlWorkerScript.dll

    • Size

      53KB

    • MD5

      b1355f6f2e317a7c47c7179c1d48f407

    • SHA1

      db7fab191779a9fcc90710da7ece693d55e6feff

    • SHA256

      5c3150972603c07290cf8dcfa7e6d850abb6a1d15f3f1c42d8bdac8623f1a148

    • SHA512

      c0a22ef0abd17c29199960ffd1c2de65a007bd2616f988451dfe88f48ee4a15e0fe3cb4360d3783f8d2c5acd6026f130cb22e0837fdd04ef5f433d3d7a0b6951

    • SSDEEP

      768:PnzAEqsfHbF+RC/q1TXydoz2esnQgSCod1GwvwuZG4B:PnuKMRHlaeYQCPewuZzB

    Score
    1/10
    • Target

      Qt5Quick.dll

    • Size

      4.1MB

    • MD5

      1318935680b9b9771e1e4c80fa97fbd4

    • SHA1

      e3c8efc59866b68f6e28c163fbaebd24e3dd24d2

    • SHA256

      553451008520a5f0110d84192cba40208fb001c27454f946e85e6fb2e6553292

    • SHA512

      678e4678fcdaf09f8d5ad5f869941f511ba5440ab7cac8e0693f20e16bca09095ccc49325fff2ba0db56df6e4c751a273aec13ccb49e703909efc6ca96f6ab6e

    • SSDEEP

      49152:/HyNQTBKx8buUfPkOTSvvJjw8snmD1OMbSMO/cx1BCHYBQvFEUxKJ:/SY37nSE9EXk

    Score
    1/10
    • Target

      Qt5QuickControls2.dll

    • Size

      167KB

    • MD5

      60217140ebbd4fe3d430d09505928d45

    • SHA1

      df65388f808c5f6f24e4d320ff7a03db1d1df5ad

    • SHA256

      dd30ade18125471c8700ba01cfb54e85570c0f365e969717bc0ba6ee8199e242

    • SHA512

      8e2ae344145531f03db3a7d916d6e6e85edf7c34778c97f9361455fc12ec013f828a9634abb7f293e548dd9be5c45e9d637d7ecfc10624138476c7eaec532b87

    • SSDEEP

      3072:9yh+Y6ksWf73lmYPgnmdtKS6Kum9HcJPbISsvdwtCDE/:9yh+Y6ksQ3lWKum98FbISsvdwtC

    Score
    1/10
    • Target

      SoftWare.exe

    • Size

      519KB

    • MD5

      6cd94ef0b2245b577a230068b4760f21

    • SHA1

      910216b366b81559eb121d927ccc30aba673f4d6

    • SHA256

      65c7a022d399dd209c3d1cde9ee2f934c7a16237055b2ee911f923ab0735c7c3

    • SHA512

      e2ec3c47e34730c12945a46befde9fafc7a03088dd38483f3fe9d51f53946ff66ac88a9d09cbb527aa59417374e856346a2c1116584acb01cc4d2381af72b6de

    • SSDEEP

      12288:CTZU3zYmdA2m0YVpuHNkOfCkguhkwbm9wIGeY5e74OEO:CFU3zUzVstkcbthlm9wUY5UTt

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

    • Target

      ffmpeg.dll

    • Size

      2.6MB

    • MD5

      2fc7f6b0abd1af4988e30e58e8310291

    • SHA1

      9d553d0ca4f13bf2ce07d850344cb1ca70bea0a6

    • SHA256

      b08a720802c6dc662247e52658499ce9f87211e0d88343fb0326a1ce9abc5e8b

    • SHA512

      cdcad781dae26a565fe07dec861c5f47a0861e308a275da529aadc9f4dd03778b40ba8b9e8b7cc3042b7d543cef6ec38f8e79761a7d6c5fe639872ed23d799c2

    • SSDEEP

      49152:A14LZeiXTFI6vTD9MxCAJ0qsOw0FZnHzKedVLes+/EnvIS:V7hMxjk0vB

    Score
    1/10
    • Target

      icudtl.dat

    • Size

      9.7MB

    • MD5

      224ba45e00bbbb237b34f0facbb550bf

    • SHA1

      1b0f81da88149d9c610a8edf55f8f12a87ca67de

    • SHA256

      8dee674ccd2387c14f01b746779c104e383d57b36c2bdc8e419c470a3d5ffadc

    • SHA512

      c04d271288dd2eff89d91e31829586706eba95ffbab0b75c2d202a4037e66a4e2205e8a37ecf15116302c51239b1826064ed4670a3346439470b260aba0ea784

    • SSDEEP

      196608:GEGwSv9AAQ48yTliXUxR0rHa93WhlU6tgYLu:G4KlQ4xliXUxR0rHa93WhlU6tgYC

    Score
    3/10
    • Target

      libEGL.dll

    • Size

      431KB

    • MD5

      1ed91477a02e0e2a64e5e9f26bcea438

    • SHA1

      8058c2bd3342d8d882768188b1e5c45567a8dde9

    • SHA256

      a1267343e2ff9f9603627c0520e6cdd8e4a67fba041146e8def6a43e334a4e03

    • SHA512

      c80ace4df62ccde9699cafaffae290cb9ab83dc5db5fed6483aadea0f6389eaab8cc44f8cfde43aa980307a6f357d51c406fa267293135def1eee5378d0960a5

    • SSDEEP

      6144:gbSSlxpHPDSDwFRSHXEU4alu73cwp1MmJw7r2qVmTsR6Lbg3y:q9lxdPewF43EDaG+0TP3g3

    Score
    1/10
    • Target

      libGLESv2.dll

    • Size

      7.5MB

    • MD5

      640a515fcd8e5d5a332c1d40c47700b0

    • SHA1

      0128c9d499deb7866f3d7aae0adab69d9a8f768f

    • SHA256

      927c858deb4700d3759fab436d5ba554ff4cf7be505d536ea1c673707d5ca8a1

    • SHA512

      792acebb5ba329e61bc319b415ba01248dcf18c7e46695222682dbf59d179403ced15c19ae03a282dec7e622121c05844d8eae5a04a2aa1f552ebced51644e27

    • SSDEEP

      49152:cHYVf3vXozSZVwq1ZET78U9t9Ib7P4jN0gVkel0hZecqjXFArFFiKMTvrd5/Lln+:DWD0Ue/elpegxsgPRPV+fJJ7od0m

    Score
    1/10
    • Target

      manual/Manual.txt

    • Size

      304B

    • MD5

      fedb99833610bf1d14c1b822d8749eb4

    • SHA1

      30a235c245dae06ac13a2a002ef6a3c8721fb458

    • SHA256

      bc82346a9791b6cc93922e72123f9e7952d0f9905fc8bc1afc50ffcb4f8c3f27

    • SHA512

      16200d6c632bb90c0e1099e78c34301c39c6b486353a996611063c02a15aa7f47efff88cd029d282177665d7508afb8ae715823ad7327e49c1ddd78e531059dc

    Score
    1/10
    • Target

      settings/cef_100_percent.pak

    • Size

      261KB

    • MD5

      b84d20e51dc7b971c7ab2502e3843f1f

    • SHA1

      ed87bd499cae74a748e03fc33c36476a20487b78

    • SHA256

      62d84df6c05bc41086aef1caff5b2db9cacd18535cb64407e79b715baa316b17

    • SHA512

      1dcf7ff2cd92708892a43fb6cb9df5b46c1f98c49b7f58dc915b31dcaa27323d9055754173005b16581e74add695b62fa096890a40e3a2ee42ddb11a785920d5

    • SSDEEP

      6144:FIYS+PehTgH+a6S9zwV5TrOHCZ3x5c1YC7x10fSucY7OP2ITQ:FIGeb1Ngf1d/dQ

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

lummadiscoverystealer
Score
10/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

lummadiscoverystealer
Score
10/10

behavioral20

lummadiscoverystealer
Score
10/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

discovery
Score
3/10

behavioral24

Score
3/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

discovery
Score
3/10

behavioral32

Score
3/10