General

  • Target

    aa40e94a784f08ba49d7983508c5d626390245090e0a164454af2f6cedc70cba

  • Size

    1.5MB

  • Sample

    241119-mnj3vstrez

  • MD5

    cc25614af4c9cee2879026d985088caa

  • SHA1

    b898b3d40692477f3030916f6183ed5bb2d155fc

  • SHA256

    aa40e94a784f08ba49d7983508c5d626390245090e0a164454af2f6cedc70cba

  • SHA512

    ab52d5bc171ad24968794be99a5da45e0c4af57cad3100a1ab37521b0098c22b3b01ba87965a2805a078ef8001c72ce14b4e083fbd65135bd5672fdb78f94159

  • SSDEEP

    24576:k1V5bEb5v837jDHNCFYC/kNMqc5wwcotkPh2sQNxPkd5zwdSNLDx:kfxCFNGMql5PnQNCrzy+

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://processhol.sbs/api

https://p10tgrace.sbs/api

https://peepburry828.sbs/api

https://3xp3cts1aim.sbs/api

https://p3ar11fter.sbs/api

Targets

    • Target

      aa40e94a784f08ba49d7983508c5d626390245090e0a164454af2f6cedc70cba

    • Size

      1.5MB

    • MD5

      cc25614af4c9cee2879026d985088caa

    • SHA1

      b898b3d40692477f3030916f6183ed5bb2d155fc

    • SHA256

      aa40e94a784f08ba49d7983508c5d626390245090e0a164454af2f6cedc70cba

    • SHA512

      ab52d5bc171ad24968794be99a5da45e0c4af57cad3100a1ab37521b0098c22b3b01ba87965a2805a078ef8001c72ce14b4e083fbd65135bd5672fdb78f94159

    • SSDEEP

      24576:k1V5bEb5v837jDHNCFYC/kNMqc5wwcotkPh2sQNxPkd5zwdSNLDx:kfxCFNGMql5PnQNCrzy+

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks