General

  • Target

    ec3ec6568b2f15f13b7316416fc6354c33bb02f253cb91d507fab4bd6e743f71.exe

  • Size

    4.8MB

  • Sample

    241125-rezt6szpf1

  • MD5

    e7b48ac6d0a0e919d7956b7c4ecfd0b1

  • SHA1

    9906bd40b328778bc7eac72e9e84d4e497d9d1fa

  • SHA256

    ec3ec6568b2f15f13b7316416fc6354c33bb02f253cb91d507fab4bd6e743f71

  • SHA512

    46a8daec5552a5a5e6535fa25e3ac848176fe9f63a7a5473591d2aaf7789fb776984c3cb9ee6734185de8b46652c8afc3f958a12682c7ca608d717a933bf34c2

  • SSDEEP

    49152:rcpR6LtEgo9HCUtjaCT71fVdzNYyRPjzs3zb:8godnRVljrQP

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://clearancek.site

https://licendfilteo.site

https://spirittunek.store

https://bathdoomgaz.store

https://studennotediw.store

https://dissapoiznw.store

https://eaglepawnoy.store

https://mobbipenju.store

https://mixturehari.store

Targets

    • Target

      ec3ec6568b2f15f13b7316416fc6354c33bb02f253cb91d507fab4bd6e743f71.exe

    • Size

      4.8MB

    • MD5

      e7b48ac6d0a0e919d7956b7c4ecfd0b1

    • SHA1

      9906bd40b328778bc7eac72e9e84d4e497d9d1fa

    • SHA256

      ec3ec6568b2f15f13b7316416fc6354c33bb02f253cb91d507fab4bd6e743f71

    • SHA512

      46a8daec5552a5a5e6535fa25e3ac848176fe9f63a7a5473591d2aaf7789fb776984c3cb9ee6734185de8b46652c8afc3f958a12682c7ca608d717a933bf34c2

    • SSDEEP

      49152:rcpR6LtEgo9HCUtjaCT71fVdzNYyRPjzs3zb:8godnRVljrQP

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks