Overview

overview

10

Static

static

3

Adobbe Pho...d).zip

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Adobbe Photoshop (infected).zip

  • Size

    16.1MB

  • Sample

    241017-3p67sawejk

  • MD5

    eabd21ecd109e3c3c4be2bb2821e5770

  • SHA1

    f46b2a44bd0c49b777c270e4a3fad1358b55ccbc

  • SHA256

    89b58012161ec852f2405faa24aa9f502a89908426ee01daac75616989cfb03d

  • SHA512

    65cc387534a330a4912bd929f1972114219edea715b9603bddf575b6f7a8f8f9b4022b0bcbed6a02e4603decf1e41d7a6a1bdf79b42e129d3c93ea81fe0adb38

  • SSDEEP

    393216:e2o/wXL0ByxAW8Oc11akI6LNyLPX7WcfKQIxx1RWfoy1naXf4m:eRwXoBQALV1aX2y7ycfKQIOFCf4m

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://conceptionnyi.sbs

https://platformcati.sbs

https://nervepianoyo.sbs

https://qualifielgalt.sbs

https://smashygally.sbs

https://fightyglobo.sbs

https://modellydivi.sbs

https://pioneeruyj.sbs

https://explorationmsn.store

Targets

    • Target

      Adobbe Photoshop (infected).zip

    • Size

      16.1MB

    • MD5

      eabd21ecd109e3c3c4be2bb2821e5770

    • SHA1

      f46b2a44bd0c49b777c270e4a3fad1358b55ccbc

    • SHA256

      89b58012161ec852f2405faa24aa9f502a89908426ee01daac75616989cfb03d

    • SHA512

      65cc387534a330a4912bd929f1972114219edea715b9603bddf575b6f7a8f8f9b4022b0bcbed6a02e4603decf1e41d7a6a1bdf79b42e129d3c93ea81fe0adb38

    • SSDEEP

      393216:e2o/wXL0ByxAW8Oc11akI6LNyLPX7WcfKQIxx1RWfoy1naXf4m:eRwXoBQALV1aX2y7ycfKQIOFCf4m

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks