General

  • Target

    common sense soham swami book.7z

  • Size

    19.2MB

  • Sample

    241118-2em6gswfrf

  • MD5

    a1847e0c2d6763105d81470bb377f2e7

  • SHA1

    f7122a1ec608876b36667dc3c4d91f1b86f6f43f

  • SHA256

    cf991fc33be3026f72806d479147cc6d89bac011a4335bebcaefd6fd834732d4

  • SHA512

    5bd7851d16a25dc8bf28dd32687159de329fe7468ecfdc1f18605ea2f66aba68d419189a930ff02d6dab49e195a2c18177391837d03f880c0b265bf78e5884b9

  • SSDEEP

    393216:VZpAtJzOeC1fwptR867pyHtLSHXbyTMNgH+ImEEcKaiBt5:VAtJSeufw667OLiyT5VmEEcy

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://processhol.sbs/api

https://p10tgrace.sbs/api

https://peepburry828.sbs/api

https://3xp3cts1aim.sbs/api

https://p3ar11fter.sbs/api

Targets

    • Target

      common sense soham swami book.exe

    • Size

      933.1MB

    • MD5

      258e819f112fcec3a0a32483ad282344

    • SHA1

      81328127afb5a94edf7e750498aac498ba67fc8e

    • SHA256

      7def2c0c9f6f4553ed7360fcda84369d6c2d524b1763688ec1ca2fbdfdbb7199

    • SHA512

      dc2df627cdcc6fa7244329910ecdc6195f3e0fc47a5f05afcb28bc96e6eee1eab9970427c67866b4a03be26edfa5208ceeff9d2c4c92a23d5627656ab922ca31

    • SSDEEP

      1572864:DRJ4FGF8ZpORSnl2FDFKgFwhwduFRF3F93Hr6C3zFiFUFoYoiZeNLuQRZPooFq:D8x1lA

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks