General

  • Target

    bf0dde5d30ea9e2acf521400c3500351.exe

  • Size

    5.7MB

  • Sample

    241124-k41z7stjdt

  • MD5

    bf0dde5d30ea9e2acf521400c3500351

  • SHA1

    43366909bc8c51bd0a483ec3ecc0b2a132b595bb

  • SHA256

    f4732694fa09ed9117fc1bec5ec25d135ee64717e85202722c085a60ec8f8f57

  • SHA512

    57c31332f03313c43b5344e343972021045eece6a350ae22c5c28efd33511ec4716daa799bde2fe35c01c256387446cd9e4316ae643d55b03004048a00772779

  • SSDEEP

    98304:luyxjuQAgLppjic/QzfLTp5cXevTHaCVVCt72WaI+9Htr7fOLxdouYGX:lhRLpp+cozftHamwxaBpbOr8GX

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://associationokeo.shop/api

https://turkeyunlikelyofw.shop/api

https://detectordiscusser.shop/api

https://technologyenterdo.shop/api

https://hellpartnercareeroo.shop/api

Targets

    • Target

      bf0dde5d30ea9e2acf521400c3500351.exe

    • Size

      5.7MB

    • MD5

      bf0dde5d30ea9e2acf521400c3500351

    • SHA1

      43366909bc8c51bd0a483ec3ecc0b2a132b595bb

    • SHA256

      f4732694fa09ed9117fc1bec5ec25d135ee64717e85202722c085a60ec8f8f57

    • SHA512

      57c31332f03313c43b5344e343972021045eece6a350ae22c5c28efd33511ec4716daa799bde2fe35c01c256387446cd9e4316ae643d55b03004048a00772779

    • SSDEEP

      98304:luyxjuQAgLppjic/QzfLTp5cXevTHaCVVCt72WaI+9Htr7fOLxdouYGX:lhRLpp+cozftHamwxaBpbOr8GX

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks