General

  • Target

    d4a2d9c10babdabd7bf16ee4773da3f82951c5741a682db002820deb6ff5eafd

  • Size

    19.3MB

  • Sample

    241120-p1ltbsxkav

  • MD5

    0680170d17b99321500944eb7deded51

  • SHA1

    e7f95862d8e68584087acee5207dde9d81d544af

  • SHA256

    d4a2d9c10babdabd7bf16ee4773da3f82951c5741a682db002820deb6ff5eafd

  • SHA512

    d5f3c3de6ab48749c686686440affedeb8f9af272d8a3f50d4144dfb62fcfb43f4b501d13a156498b72a176d527ece6af4c27efa5c44e63b90d92a0c837daa2a

  • SSDEEP

    196608:4ce3WrKkBP/xttbTk6v69c6rW+s0Sq+eHJMI0/:4cLf1xtt165rjRMz/

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://offybirhtdi.sbs

https://activedomest.sbs

https://arenbootk.sbs

https://mediavelk.sbs

https://definitib.sbs

https://elaboretib.sbs

https://strikebripm.sbs

https://ostracizez.sbs

Targets

    • Target

      d4a2d9c10babdabd7bf16ee4773da3f82951c5741a682db002820deb6ff5eafd

    • Size

      19.3MB

    • MD5

      0680170d17b99321500944eb7deded51

    • SHA1

      e7f95862d8e68584087acee5207dde9d81d544af

    • SHA256

      d4a2d9c10babdabd7bf16ee4773da3f82951c5741a682db002820deb6ff5eafd

    • SHA512

      d5f3c3de6ab48749c686686440affedeb8f9af272d8a3f50d4144dfb62fcfb43f4b501d13a156498b72a176d527ece6af4c27efa5c44e63b90d92a0c837daa2a

    • SSDEEP

      196608:4ce3WrKkBP/xttbTk6v69c6rW+s0Sq+eHJMI0/:4cLf1xtt165rjRMz/

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks