General

  • Target

    9bd25e01ae96fb8c0e3672f32bbe8f39db4099133ddceaaa87c7d74258d8ed1f.exe

  • Size

    3.2MB

  • Sample

    241125-rfjjkszph1

  • MD5

    96a3c3d3a45c5328255771990bf2c83d

  • SHA1

    28633e11efab8020608ea2ec546de952cd1288b3

  • SHA256

    9bd25e01ae96fb8c0e3672f32bbe8f39db4099133ddceaaa87c7d74258d8ed1f

  • SHA512

    831a61c3df25f7d5a0511f84ca037674e129ed297997a2b5e095787ca730baf092db43a13ef9868d65de1e2704f2236685b5dfcab099b71a2d442fbd9127b602

  • SSDEEP

    49152:kbuQpU5YxkMGj//u+nTwY4rt3/fHjD69cmi+QuhHDRHFeJcUOcWiOaVQjzi72bGi:kfTEf3

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://conceptionnyi.sbs

https://platformcati.sbs

https://nervepianoyo.sbs

https://qualifielgalt.sbs

https://smashygally.sbs

https://fightyglobo.sbs

https://modellydivi.sbs

https://pioneeruyj.sbs

https://underlinefiue.sbs

Extracted

Family

lumma

C2

https://platformcati.sbs/api

Targets

    • Target

      9bd25e01ae96fb8c0e3672f32bbe8f39db4099133ddceaaa87c7d74258d8ed1f.exe

    • Size

      3.2MB

    • MD5

      96a3c3d3a45c5328255771990bf2c83d

    • SHA1

      28633e11efab8020608ea2ec546de952cd1288b3

    • SHA256

      9bd25e01ae96fb8c0e3672f32bbe8f39db4099133ddceaaa87c7d74258d8ed1f

    • SHA512

      831a61c3df25f7d5a0511f84ca037674e129ed297997a2b5e095787ca730baf092db43a13ef9868d65de1e2704f2236685b5dfcab099b71a2d442fbd9127b602

    • SSDEEP

      49152:kbuQpU5YxkMGj//u+nTwY4rt3/fHjD69cmi+QuhHDRHFeJcUOcWiOaVQjzi72bGi:kfTEf3

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks