General

  • Target

    ExL4unch€®.exe

  • Size

    19.2MB

  • Sample

    241121-rpj7gaxlcr

  • MD5

    b2f3fcd2a82e9281542bae77b0828861

  • SHA1

    b5930c2c4ba8ab462f510b316fbfe9a8330dd143

  • SHA256

    6c70de6433c7d4e05aaee6447aa4f5ae6cfe5863dd767f1555f7a7d32d648ff4

  • SHA512

    6b5468132c7019240f49f788716b73d90b6b97bc087574ed1a8e646588155d6477df7fcf863ae60e65c3c7345da2d993735f9b49e1014dbfed3496a7de0229e9

  • SSDEEP

    393216:SoUUNGMqPezRs7v7SARUPcr8wfmkdAPw3Sg:omR87SAR/wCBsQ3

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://windpull.cyou/api

Targets

    • Target

      ExL4unch€®.exe

    • Size

      19.2MB

    • MD5

      b2f3fcd2a82e9281542bae77b0828861

    • SHA1

      b5930c2c4ba8ab462f510b316fbfe9a8330dd143

    • SHA256

      6c70de6433c7d4e05aaee6447aa4f5ae6cfe5863dd767f1555f7a7d32d648ff4

    • SHA512

      6b5468132c7019240f49f788716b73d90b6b97bc087574ed1a8e646588155d6477df7fcf863ae60e65c3c7345da2d993735f9b49e1014dbfed3496a7de0229e9

    • SSDEEP

      393216:SoUUNGMqPezRs7v7SARUPcr8wfmkdAPw3Sg:omR87SAR/wCBsQ3

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Blocklisted process makes network request

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks