General

  • Target

    main.exe

  • Size

    329KB

  • Sample

    241122-nzf11swlbn

  • MD5

    9b300e5cdf48d045292ca47134cebaea

  • SHA1

    9c8c8d567b8f641b9dc8d125fffbe9b12de61546

  • SHA256

    26c1c2c2d03706954082aff051365d30409374a5692fa190d5e49ba324b43b39

  • SHA512

    1f895534f901e69d9aa480e818b825a52130b2443dda85c31adfedf2d67e3e9ef16956e11e969993bd2d5b30c18196c3e45560675fa45115cb39181cce2266c1

  • SSDEEP

    6144:SJpbkzsZ3y484hpmqxtq7pAgKpk2u9vb6odmbr6UdJ:SJpbhty49tq7pJHLbMT

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://tryyudjasudqo.shop/api

https://eemmbryequo.shop/api

https://reggwardssdqw.shop/api

https://relaxatinownio.shop/api

https://tesecuuweqo.shop/api

https://tendencctywop.shop/api

https://licenseodqwmqn.shop/api

https://keennylrwmqlw.shop/api

https://salvaitoynwo.shop/api

Targets

    • Target

      main.exe

    • Size

      329KB

    • MD5

      9b300e5cdf48d045292ca47134cebaea

    • SHA1

      9c8c8d567b8f641b9dc8d125fffbe9b12de61546

    • SHA256

      26c1c2c2d03706954082aff051365d30409374a5692fa190d5e49ba324b43b39

    • SHA512

      1f895534f901e69d9aa480e818b825a52130b2443dda85c31adfedf2d67e3e9ef16956e11e969993bd2d5b30c18196c3e45560675fa45115cb39181cce2266c1

    • SSDEEP

      6144:SJpbkzsZ3y484hpmqxtq7pAgKpk2u9vb6odmbr6UdJ:SJpbhty49tq7pJHLbMT

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks