General

  • Target
    Side_Load_Lumma.7z
  • Size 12.1MB
  • Sample241119-kqlncstdkj
  • SHA256 3f4b288335a86c908e015d254715d6fb9838f729e13aa3c06e53792ddaf59cad
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • lumma

C2
  • https://processhol.sbs/api

  • https://p10tgrace.sbs/api

  • https://peepburry828.sbs/api

  • https://p3ar11fter.sbs/api

  • https://3xp3cts1aim.sbs/api

Targets

    • Target
      Sample/IasMigPlugin.dll
    • Size 554KB
    • SHA256 f4120c3f5d73b369f949b8585816e9e61ded4449dcdc5dd64a832a73768a99cb
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Sample/Qt5Core.dll
    • Size 5.8MB
    • SHA256 dc68a1446e829afa5c7e33f4dd2233e096a492bdf3a82eb0eeacfafb69bdecbf
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Sample/Qt5Gui.dll
    • Size 6.2MB
    • SHA256 ca8334b2e63bc01f0749afeb9e87943c29882131efe58608ea25732961b2df34
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Sample/Qt5Network.dll
    • Size 1.2MB
    • SHA256 5f13704a36b5957d238e1ef6e8b88e520c97d287a6b364181d9670f2eace0b14
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Sample/Qt5PrintSupport.dll
    • Size 316KB
    • SHA256 7d91d3d341dbba568e2d19382e9d58a42a0d78064c3ad7adfe3c7bb14742c2b1
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Sample/Qt5Widgets.dll
    • Size 5.3MB
    • SHA256 4266918226c680789d49cf2407a7fec012b0ed872adafb84c7719e645f9b2e6d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Sample/Setup.exe
    • Size 1.2MB
    • SHA256 588cb61b36a001384a2833bd5df8d7982ca79d6ae17a3d83a94e01b1e79684bd
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Blocklisted process makes network request

    • Suspicious use of SetThreadContext

    • Target
      Sample/StarBurn.dll
    • Size 1.4MB
    • SHA256 c040a25377028b0c28db81a012de786c803a0e9d6f87ce460335a621d31f5340
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Sample/config.prx
    • Size 364KB
    • SHA256 7fa86147035627bae39576bcbe619d045e94a48c4db8ca131968c20bb4de4a36
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Sample/msvcp140.dll
    • Size 557KB
    • SHA256 72fe4598f0b75d31ce2dc621e8ef161338c6450bb017cd06895745690603729e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Sample/opengl64.dll
    • Size 17.7MB
    • SHA256 dd575f3c64382193610815909bd2c52490244ecbbb9bba6eef5fe4f0bb43bb4d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Sample/vcruntime140.dll
    • Size 96KB
    • SHA256 d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Sample/vcruntime140_1.dll
    • Size 37KB
    • SHA256 1758085a61527b427c4380f0c976d29a8bee889f2ac480c356a3f166433bf70e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks