General

  • Target

    03323fbc61c33a90232828c9dd3183cc25c4a7529188f476e1728e6ee8168a35.exe

  • Size

    574KB

  • Sample

    241122-hnkbeasjgn

  • MD5

    cb2102ed163924edc3e6ea38ba9e9005

  • SHA1

    3d9e017c7c02ba3a77811f4895c85f6d8e5f45e1

  • SHA256

    03323fbc61c33a90232828c9dd3183cc25c4a7529188f476e1728e6ee8168a35

  • SHA512

    0385883f3d83da070bfbb0522b2a31d50d81eee7ae516de9b49888e4fdba8bbe54bcf9e08d2da312166ddf1e09db35e9badc8dee97340f5c969f961d746a89ca

  • SSDEEP

    12288:SRgyqSwAN2kLkjnP13tGIGef4cDDKeCxeAn3tCk9Rj71Mlr71:ig2N2kLkTd3AIGFcDtSVvCr71

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://fumblingactor.cyou/api

Targets

    • Target

      03323fbc61c33a90232828c9dd3183cc25c4a7529188f476e1728e6ee8168a35.exe

    • Size

      574KB

    • MD5

      cb2102ed163924edc3e6ea38ba9e9005

    • SHA1

      3d9e017c7c02ba3a77811f4895c85f6d8e5f45e1

    • SHA256

      03323fbc61c33a90232828c9dd3183cc25c4a7529188f476e1728e6ee8168a35

    • SHA512

      0385883f3d83da070bfbb0522b2a31d50d81eee7ae516de9b49888e4fdba8bbe54bcf9e08d2da312166ddf1e09db35e9badc8dee97340f5c969f961d746a89ca

    • SSDEEP

      12288:SRgyqSwAN2kLkjnP13tGIGef4cDDKeCxeAn3tCk9Rj71Mlr71:ig2N2kLkTd3AIGFcDtSVvCr71

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks