General

  • Target

    37920d8cc7232a6ac929aaad74793e75a0a316b25556ceaeadb93a62adb735ae.exe

  • Size

    550KB

  • Sample

    241119-yabeca1hlp

  • MD5

    1bae2d9d7291892c580f398ef2bc347f

  • SHA1

    fe6d8c2a7eca250e1e9c8269854446f37b14484f

  • SHA256

    37920d8cc7232a6ac929aaad74793e75a0a316b25556ceaeadb93a62adb735ae

  • SHA512

    49bd8d1dfb8d18f9fbca45e75c2c7a8dd54ca7fd5dbf6b048936a06f6579e46ff0fc0e976705d2e91d5f44257f16cddf2d928447d74a8a16f29823e1101c65c4

  • SSDEEP

    12288:SQ5vTleU6iA6AiJ/uJxZjUXUxYcuORWETWOORGzbZr4QClJJRJAr6Ok9:SQ5pexaALoXe45

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://covvercilverow.shop/api

https://surroundeocw.shop/api

https://abortinoiwiam.shop/api

https://pumpkinkwquo.shop/api

https://priooozekw.shop/api

https://deallyharvenw.shop/api

https://defenddsouneuw.shop/api

https://racedsuitreow.shop/api

https://roaddrermncomplai.shop/api

Targets

    • Target

      37920d8cc7232a6ac929aaad74793e75a0a316b25556ceaeadb93a62adb735ae.exe

    • Size

      550KB

    • MD5

      1bae2d9d7291892c580f398ef2bc347f

    • SHA1

      fe6d8c2a7eca250e1e9c8269854446f37b14484f

    • SHA256

      37920d8cc7232a6ac929aaad74793e75a0a316b25556ceaeadb93a62adb735ae

    • SHA512

      49bd8d1dfb8d18f9fbca45e75c2c7a8dd54ca7fd5dbf6b048936a06f6579e46ff0fc0e976705d2e91d5f44257f16cddf2d928447d74a8a16f29823e1101c65c4

    • SSDEEP

      12288:SQ5vTleU6iA6AiJ/uJxZjUXUxYcuORWETWOORGzbZr4QClJJRJAr6Ok9:SQ5pexaALoXe45

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks