General

  • Target

    pic simulator ide full crack software.exe

  • Size

    762.1MB

  • Sample

    241126-sm7enasqep

  • MD5

    89e24a2d1e9a5c4b135dd0d05685da21

  • SHA1

    4550bade9b2dfedb5980cf6683793433ae4a9c33

  • SHA256

    f541ede6edd846768b78bff4a679528b580708a41f154fbca194b45dde0cbeac

  • SHA512

    359f56374a41821d8f894bbe0086fe4f34c3cae31f129efba4201fdecff1695890b069b8914d0198a4491d02e623aac50d05bc5d21d3cbbab7fdce0160c19573

  • SSDEEP

    393216:FxTuuL2PddxuL2PdT6ieFM0+M4HBvSEuQRZPR:FBuuL2PddxuL2PdNL9lSEuQRZP

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://powerful-avoids.sbs

https://motion-treesz.sbs

https://disobey-curly.sbs

https://leg-sate-boat.sbs

https://story-tense-faz.sbs

https://blade-govern.sbs

https://occupy-blushi.sbs

https://frogs-severz.sbs

https://river-stone.shop/api

Extracted

Family

lumma

C2

https://river-stone.shop/api

https://occupy-blushi.sbs/api

https://blade-govern.sbs/api

https://story-tense-faz.sbs/api

https://disobey-curly.sbs/api

https://motion-treesz.sbs/api

https://powerful-avoids.sbs/api

Targets

    • Target

      pic simulator ide full crack software.exe

    • Size

      762.1MB

    • MD5

      89e24a2d1e9a5c4b135dd0d05685da21

    • SHA1

      4550bade9b2dfedb5980cf6683793433ae4a9c33

    • SHA256

      f541ede6edd846768b78bff4a679528b580708a41f154fbca194b45dde0cbeac

    • SHA512

      359f56374a41821d8f894bbe0086fe4f34c3cae31f129efba4201fdecff1695890b069b8914d0198a4491d02e623aac50d05bc5d21d3cbbab7fdce0160c19573

    • SSDEEP

      393216:FxTuuL2PddxuL2PdT6ieFM0+M4HBvSEuQRZPR:FBuuL2PddxuL2PdNL9lSEuQRZP

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks