General

  • Target

    779f6eab3cef74bddcabbf54b6a46d6ef6b6fba5a7218e70e5ada41f68d047d1

  • Size

    9.2MB

  • Sample

    241121-wgyr4symhn

  • MD5

    0b842f6524815b8064a51c651838cc73

  • SHA1

    08ef826547f5cf668f8d7d38477e1926a50c65db

  • SHA256

    779f6eab3cef74bddcabbf54b6a46d6ef6b6fba5a7218e70e5ada41f68d047d1

  • SHA512

    c6883d9567e435ab7a30e1f28c19ef700efd7039264a732ec00999d0c58f120f6f2ad836d20b95858316863c353f632c1935ed006d7fed99046a32595c733b97

  • SSDEEP

    196608:aCZEFPh4BO85Nn80iNFHFg5Nd6RbblazMXiQZxMWwH:aVFpSfnEF65b2VSsxMW

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://servicedny.site

https://authorisev.site

https://faulteyotk.site

https://dilemmadu.site

https://contemteny.site

https://goalyfeastz.site

https://opposezmny.site

https://seallysl.site

https://treatmentyj.cyou

Targets

    • Target

      779f6eab3cef74bddcabbf54b6a46d6ef6b6fba5a7218e70e5ada41f68d047d1

    • Size

      9.2MB

    • MD5

      0b842f6524815b8064a51c651838cc73

    • SHA1

      08ef826547f5cf668f8d7d38477e1926a50c65db

    • SHA256

      779f6eab3cef74bddcabbf54b6a46d6ef6b6fba5a7218e70e5ada41f68d047d1

    • SHA512

      c6883d9567e435ab7a30e1f28c19ef700efd7039264a732ec00999d0c58f120f6f2ad836d20b95858316863c353f632c1935ed006d7fed99046a32595c733b97

    • SSDEEP

      196608:aCZEFPh4BO85Nn80iNFHFg5Nd6RbblazMXiQZxMWwH:aVFpSfnEF65b2VSsxMW

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks