General

  • Target

    2024-11-24_e86224a012a5f1b729182f3ee7188313_frostygoop_poet-rat_snatch

  • Size

    8.2MB

  • Sample

    241124-jtetjs1lew

  • MD5

    e86224a012a5f1b729182f3ee7188313

  • SHA1

    815241dd131930091cae154a21cb842d290f677f

  • SHA256

    79d2beb666f27be59e7aadae2c2acb139221689d734f556779c91e0f3a4629e1

  • SHA512

    26d6add3a1fc250eeab77ecf3d8d2e02cd3a873ecbb3dd8465e1a2e6ed89b8f25f55cee347b178678651df71083c5132cabc97c2ac11cf469765a8d4a40e1e6a

  • SSDEEP

    98304:9fdMMWNTwsBRL+oNyAJHBcjrNH+mCmDs9JFJ:IQsNHedhsr

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://scriptyprefej.store

https://navygenerayk.store

https://founpiuer.store

https://necklacedmny.store

https://thumbystriw.store

https://fadehairucw.store

https://crisiwarny.store

https://presticitpo.store

Targets

    • Target

      2024-11-24_e86224a012a5f1b729182f3ee7188313_frostygoop_poet-rat_snatch

    • Size

      8.2MB

    • MD5

      e86224a012a5f1b729182f3ee7188313

    • SHA1

      815241dd131930091cae154a21cb842d290f677f

    • SHA256

      79d2beb666f27be59e7aadae2c2acb139221689d734f556779c91e0f3a4629e1

    • SHA512

      26d6add3a1fc250eeab77ecf3d8d2e02cd3a873ecbb3dd8465e1a2e6ed89b8f25f55cee347b178678651df71083c5132cabc97c2ac11cf469765a8d4a40e1e6a

    • SSDEEP

      98304:9fdMMWNTwsBRL+oNyAJHBcjrNH+mCmDs9JFJ:IQsNHedhsr

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks