Overview

overview

10

Static

static

1

Gagunitor.zip

windows7-x64

10

Gagunitor.zip

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Gagunitor.zip

  • Size

    73.3MB

  • Sample

    241119-qnbm9swfja

  • MD5

    7e0a9968698fa8e686ad88f4d1f951d6

  • SHA1

    ea49f8416b73803f9441914479412e9e12ef1fdf

  • SHA256

    532ce707d200d124b0f413a2ae862c65ff8238b6d6e51d31e7b33ae7c4c38b3c

  • SHA512

    df45e8c05662983f52e9db17aedbc08cee8a9cced98d8b3ba9eab3701cb32c34ecd6c0dc59510d134521eb945032c9d0583f4ba5028e5ca611b896e5f049f4d5

  • SSDEEP

    1572864:+tDK88RZUwxivWNCeATPtK/H+UsMt5pdiG7j1NcWv7jo:mwHUwxiviCeArdet5Fj1Nvvvo

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://processhol.sbs/api

https://p10tgrace.sbs/api

https://peepburry828.sbs/api

https://3xp3cts1aim.sbs/api

https://p3ar11fter.sbs/api

Targets

    • Target

      Gagunitor.zip

    • Size

      73.3MB

    • MD5

      7e0a9968698fa8e686ad88f4d1f951d6

    • SHA1

      ea49f8416b73803f9441914479412e9e12ef1fdf

    • SHA256

      532ce707d200d124b0f413a2ae862c65ff8238b6d6e51d31e7b33ae7c4c38b3c

    • SHA512

      df45e8c05662983f52e9db17aedbc08cee8a9cced98d8b3ba9eab3701cb32c34ecd6c0dc59510d134521eb945032c9d0583f4ba5028e5ca611b896e5f049f4d5

    • SSDEEP

      1572864:+tDK88RZUwxivWNCeATPtK/H+UsMt5pdiG7j1NcWv7jo:mwHUwxiviCeArdet5Fj1Nvvvo

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks