General

  • Target

    2cbda1d6b0bfd6255206a8ee985c8017e363387c92f89224a238719ccb71855f.exe

  • Size

    459KB

  • Sample

    241127-2enf9atlcz

  • MD5

    6e57e8aeeee64b435313f554a8c24839

  • SHA1

    0cf63c1c13308edeae3f236be6780b9de1abacc9

  • SHA256

    2cbda1d6b0bfd6255206a8ee985c8017e363387c92f89224a238719ccb71855f

  • SHA512

    1e8c19634ffea770d1a2b40534ed6a62946eef21f2e494a703331c62489790fe077c1c9d9c15d9c399bf3654659c1740a27987bac1fa58e0744680ac25b97463

  • SSDEEP

    12288:WxSZOzTe3q72Qk2phZS/AzVNocCBT8+H39YktxVLwU1GLX52U:EEOua72Qk2phc/A5NLCBT8q39YMESAJ9

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://p3ar11fter.sbs

https://3xp3cts1aim.sbs

https://owner-vacat10n.sbs

https://peepburry828.sbs

https://p10tgrace.sbs

https://befall-sm0ker.sbs

https://librari-night.sbs

https://processhol.sbs

Targets

    • Target

      2cbda1d6b0bfd6255206a8ee985c8017e363387c92f89224a238719ccb71855f.exe

    • Size

      459KB

    • MD5

      6e57e8aeeee64b435313f554a8c24839

    • SHA1

      0cf63c1c13308edeae3f236be6780b9de1abacc9

    • SHA256

      2cbda1d6b0bfd6255206a8ee985c8017e363387c92f89224a238719ccb71855f

    • SHA512

      1e8c19634ffea770d1a2b40534ed6a62946eef21f2e494a703331c62489790fe077c1c9d9c15d9c399bf3654659c1740a27987bac1fa58e0744680ac25b97463

    • SSDEEP

      12288:WxSZOzTe3q72Qk2phZS/AzVNocCBT8+H39YktxVLwU1GLX52U:EEOua72Qk2phc/A5NLCBT8q39YMESAJ9

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks