General

  • Target

    Stover Launcher.rar

  • Size

    3.3MB

  • Sample

    241127-cbb7daxlfp

  • MD5

    9ceb9d749842eb84f2a001cbd51c1cf4

  • SHA1

    53c8b425a52bb14ddc26bc0b8987e06fe982f43b

  • SHA256

    6c1ae2ea634d7dfb613450b14687d0ff7d8bfa3b96e12ab1cb58bcc85ecef6a2

  • SHA512

    91d982781d23ddb3f362da2d711a6d86c462b7117661e18d447d4e16fb0e766f7898b0aeff20504904f079957ca8e7b9c3addfb8ee69395ee24a9dbe7f46d856

  • SSDEEP

    98304:tICdzprSxk9zR6xZak9j9hMtGooKbYAovQQE7gV:2Cd9r0MzeZbl9hMtGwovQvu

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://powerful-avoids.sbs

https://motion-treesz.sbs

https://disobey-curly.sbs

https://leg-sate-boat.sbs

https://story-tense-faz.sbs

https://blade-govern.sbs

https://occupy-blushi.sbs

https://frogs-severz.sbs

https://property-imper.sbs

Targets

    • Target

      Stover Launcher.rar

    • Size

      3.3MB

    • MD5

      9ceb9d749842eb84f2a001cbd51c1cf4

    • SHA1

      53c8b425a52bb14ddc26bc0b8987e06fe982f43b

    • SHA256

      6c1ae2ea634d7dfb613450b14687d0ff7d8bfa3b96e12ab1cb58bcc85ecef6a2

    • SHA512

      91d982781d23ddb3f362da2d711a6d86c462b7117661e18d447d4e16fb0e766f7898b0aeff20504904f079957ca8e7b9c3addfb8ee69395ee24a9dbe7f46d856

    • SSDEEP

      98304:tICdzprSxk9zR6xZak9j9hMtGooKbYAovQQE7gV:2Cd9r0MzeZbl9hMtGwovQvu

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks