General

  • Target

    99cdeb79c7450c81bc30dac491e533eb0eda8a5c189494a78448aaa211c6275e.exe

  • Size

    570KB

  • Sample

    241122-db116ssrbx

  • MD5

    be296f642f22606caed21cac4d61f2fa

  • SHA1

    cd4c46055e6b2a08885e5a122c6d3434c5a90078

  • SHA256

    99cdeb79c7450c81bc30dac491e533eb0eda8a5c189494a78448aaa211c6275e

  • SHA512

    792e92bb9e4bb54067a7fc5b330c708682c8a19493207fbf1ecdc61f419956ddf2d01b2ab1480a13a9663449a4dd43f0c382d3710757f3a7571075e86546e3cd

  • SSDEEP

    12288:ro3gygylSwAN2kLkhn23cn4Ss73MF1Oa73V11tFBP33yeLdlr7v:U3gygnN2kLktscnAQp3VLBKePr7v

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://fumblingactor.cyou/api

Targets

    • Target

      99cdeb79c7450c81bc30dac491e533eb0eda8a5c189494a78448aaa211c6275e.exe

    • Size

      570KB

    • MD5

      be296f642f22606caed21cac4d61f2fa

    • SHA1

      cd4c46055e6b2a08885e5a122c6d3434c5a90078

    • SHA256

      99cdeb79c7450c81bc30dac491e533eb0eda8a5c189494a78448aaa211c6275e

    • SHA512

      792e92bb9e4bb54067a7fc5b330c708682c8a19493207fbf1ecdc61f419956ddf2d01b2ab1480a13a9663449a4dd43f0c382d3710757f3a7571075e86546e3cd

    • SSDEEP

      12288:ro3gygylSwAN2kLkhn23cn4Ss73MF1Oa73V11tFBP33yeLdlr7v:U3gygnN2kLktscnAQp3VLBKePr7v

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks