Resubmissions

08-11-2024 01:13

241108-blevks1lgs 10

08-11-2024 00:57

241108-ba4dsstqfn 10

07-11-2024 19:15

241107-xypq7sznbk 7

General

  • Target

    infected.zip

  • Size

    31.2MB

  • Sample

    241108-ba4dsstqfn

  • MD5

    f3086b596f50e215a706559d5ec8cbc8

  • SHA1

    afa5c27fbc93d1398d00324de3ac467ae377bc6e

  • SHA256

    5f73dab125efbe100426f39621d5fdedb343a1d912f88ed322ed04a66daab473

  • SHA512

    d5141566392f7089da4db9940d0ec86d236dfb68dbf05f9377797df0d9ae2b447cffe75fe0d32be402e6f3af57aff677e9ae604a63b839afd62f362a9c687016

  • SSDEEP

    786432:qHjbJsO6eSFdZUDAea6ebsP+DPdIfpCdFD5ojjBW7PQbB:GjCRVFrDeqbsPCdIfpCnDWMbQF

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://seallysl.site/api

https://opposezmny.site/api

https://goalyfeastz.site/api

https://contemteny.site/api

https://dilemmadu.site/api

https://faulteyotk.site/api

https://authorisev.site/api

https://servicedny.site/api

Targets

    • Target

      infected.zip

    • Size

      31.2MB

    • MD5

      f3086b596f50e215a706559d5ec8cbc8

    • SHA1

      afa5c27fbc93d1398d00324de3ac467ae377bc6e

    • SHA256

      5f73dab125efbe100426f39621d5fdedb343a1d912f88ed322ed04a66daab473

    • SHA512

      d5141566392f7089da4db9940d0ec86d236dfb68dbf05f9377797df0d9ae2b447cffe75fe0d32be402e6f3af57aff677e9ae604a63b839afd62f362a9c687016

    • SSDEEP

      786432:qHjbJsO6eSFdZUDAea6ebsP+DPdIfpCdFD5ojjBW7PQbB:GjCRVFrDeqbsPCdIfpCnDWMbQF

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks