General

  • Target

    2024-10-15_4e3fa1ef9d814ce28fd73cce7831c3c7_poet-rat_snatch_zxxz

  • Size

    21.1MB

  • Sample

    241015-cf1qjasdpk

  • MD5

    4e3fa1ef9d814ce28fd73cce7831c3c7

  • SHA1

    d9fb284118f75853009cbb11b71eb7b378a2d261

  • SHA256

    2b72831ca5142b0e754a0ad04f695921d17d8b71eee74e26d19b7d3350cfdbbd

  • SHA512

    fd2f77ea6ce55d9d3e0041c0676efdb7c4d4eb9d5333e9750ada22ca765afefa5bb8009778aebaeabec66e0447bb80c0756832928014a2c88ab0c085ebc44a5d

  • SSDEEP

    196608:o0V7c0EpS1lY3IiNzzzczmxW3YcynAuk:7weDiVzb2Ycyi

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://drawwyobstacw.sbs

https://condifendteu.sbs

https://ehticsprocw.sbs

https://vennurviot.sbs

https://resinedyw.sbs

https://enlargkiw.sbs

https://allocatinow.sbs

https://mathcucom.sbs

https://proclaimykn.buzz

Targets

    • Target

      2024-10-15_4e3fa1ef9d814ce28fd73cce7831c3c7_poet-rat_snatch_zxxz

    • Size

      21.1MB

    • MD5

      4e3fa1ef9d814ce28fd73cce7831c3c7

    • SHA1

      d9fb284118f75853009cbb11b71eb7b378a2d261

    • SHA256

      2b72831ca5142b0e754a0ad04f695921d17d8b71eee74e26d19b7d3350cfdbbd

    • SHA512

      fd2f77ea6ce55d9d3e0041c0676efdb7c4d4eb9d5333e9750ada22ca765afefa5bb8009778aebaeabec66e0447bb80c0756832928014a2c88ab0c085ebc44a5d

    • SSDEEP

      196608:o0V7c0EpS1lY3IiNzzzczmxW3YcynAuk:7weDiVzb2Ycyi

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks