General

  • Target

    0a2bd842cbce5d75caa6e35007453930149f881effb2c1dc27d4aac963472c82.exe

  • Size

    522KB

  • Sample

    241119-vjkgtsyhpr

  • MD5

    2b67eb69bb3a256aa2e42a2e3201b951

  • SHA1

    3bb0af582422d6daae462c1a5dcbd9e1720c7605

  • SHA256

    0a2bd842cbce5d75caa6e35007453930149f881effb2c1dc27d4aac963472c82

  • SHA512

    acf729d261b515321f14c0f1a7c385cc9f0dc3634ec4ba2f24568501d3e142aeda8456a8fc53ef41e684eaad2ea42bf29ef2a75241298a405a7ea02dbfcda8b8

  • SSDEEP

    12288:PqpVS4VidmlvARnu96usbq2Lwzeupc1+aaB6e386Lx+XvcjkO:Pq+SidvubnJzeupc1S

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://processhol.sbs/api

https://p10tgrace.sbs/api

https://peepburry828.sbs/api

https://3xp3cts1aim.sbs/api

https://p3ar11fter.sbs/api

Targets

    • Target

      0a2bd842cbce5d75caa6e35007453930149f881effb2c1dc27d4aac963472c82.exe

    • Size

      522KB

    • MD5

      2b67eb69bb3a256aa2e42a2e3201b951

    • SHA1

      3bb0af582422d6daae462c1a5dcbd9e1720c7605

    • SHA256

      0a2bd842cbce5d75caa6e35007453930149f881effb2c1dc27d4aac963472c82

    • SHA512

      acf729d261b515321f14c0f1a7c385cc9f0dc3634ec4ba2f24568501d3e142aeda8456a8fc53ef41e684eaad2ea42bf29ef2a75241298a405a7ea02dbfcda8b8

    • SSDEEP

      12288:PqpVS4VidmlvARnu96usbq2Lwzeupc1+aaB6e386Lx+XvcjkO:Pq+SidvubnJzeupc1S

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks