General

  • Target

    9c9c0aa9545234a7c2969ee504d0e13c35c2c61e03468911ae1b979ebee8e553.exe

  • Size

    422KB

  • Sample

    241119-yshw5s1naz

  • MD5

    ea9f577d6b7a85cd3952a5fb9d2cbbdd

  • SHA1

    14609e22b18ea1fb802cbb191b18775d848ec8da

  • SHA256

    9c9c0aa9545234a7c2969ee504d0e13c35c2c61e03468911ae1b979ebee8e553

  • SHA512

    b6c074d16b50e41655bb61f90b4e95854d956398322d6d789184969d67d7bfc45f22a859a7939a8f29270b5d5431607520ffddea3d5835f9db6ee54c74e7df78

  • SSDEEP

    12288:lutZv0dHkvFYeaCr2h/HuyzwD2eym66+Kkpq9cItrPuY+rU8WtCE:luIEt4dB6

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://tamedgeesy.sbs

https://relalingj.sbs

https://rottieud.sbs

https://brownieyuz.sbs

https://explainvees.sbs

https://ducksringjk.sbs

https://thinkyyokej.sbs

https://repostebhu.sbs

https://berrylinyj.cyou

Targets

    • Target

      9c9c0aa9545234a7c2969ee504d0e13c35c2c61e03468911ae1b979ebee8e553.exe

    • Size

      422KB

    • MD5

      ea9f577d6b7a85cd3952a5fb9d2cbbdd

    • SHA1

      14609e22b18ea1fb802cbb191b18775d848ec8da

    • SHA256

      9c9c0aa9545234a7c2969ee504d0e13c35c2c61e03468911ae1b979ebee8e553

    • SHA512

      b6c074d16b50e41655bb61f90b4e95854d956398322d6d789184969d67d7bfc45f22a859a7939a8f29270b5d5431607520ffddea3d5835f9db6ee54c74e7df78

    • SSDEEP

      12288:lutZv0dHkvFYeaCr2h/HuyzwD2eym66+Kkpq9cItrPuY+rU8WtCE:luIEt4dB6

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks