General

  • Target

    ea125573b553aa3bacc0074c835425fd7f7e010d96f5a2fb0965d1d4d7e0cfa7.exe

  • Size

    1.0MB

  • Sample

    241120-qmw8ksxmfw

  • MD5

    37fa9085c388776302bb712ee69b34ce

  • SHA1

    c67a86e3b46e74df1e16bce3a259736c896e9b6d

  • SHA256

    ea125573b553aa3bacc0074c835425fd7f7e010d96f5a2fb0965d1d4d7e0cfa7

  • SHA512

    c54db35b2440db79f51b6b7b4857b0a8f1b5328e3841a8cc17f47963ae47836eed750652f0bb0de26f617ffd400dfc5ac2f0575574ce60e539fd72a4e5f945fb

  • SSDEEP

    24576:LtBDay3Gho1fkdQT6HKEcvyYLpplXxOr7l:LtBDaA5EY6HKtLpr+

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://moutheventushz.shop/api

https://respectabosiz.shop/api

https://bakedstusteeb.shop/api

https://conceszustyb.shop/api

https://nightybinybz.shop/api

https://standartedby.shop/api

https://mutterissuen.shop/api

https://worddosofrm.shop/api

https://geerkenmsu.shop/api

Targets

    • Target

      ea125573b553aa3bacc0074c835425fd7f7e010d96f5a2fb0965d1d4d7e0cfa7.exe

    • Size

      1.0MB

    • MD5

      37fa9085c388776302bb712ee69b34ce

    • SHA1

      c67a86e3b46e74df1e16bce3a259736c896e9b6d

    • SHA256

      ea125573b553aa3bacc0074c835425fd7f7e010d96f5a2fb0965d1d4d7e0cfa7

    • SHA512

      c54db35b2440db79f51b6b7b4857b0a8f1b5328e3841a8cc17f47963ae47836eed750652f0bb0de26f617ffd400dfc5ac2f0575574ce60e539fd72a4e5f945fb

    • SSDEEP

      24576:LtBDay3Gho1fkdQT6HKEcvyYLpplXxOr7l:LtBDaA5EY6HKtLpr+

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks