lumma | b936f157fc8844abe2a98da8e8df696570d8506a60b7af37ff0b23e8c1d04585

General

Target

2096-3-0x0000000000BE0000-0x00000000010A1000-memory.dmp
Size

4.8MB
Sample

241127-ct576ssjbw
MD5

b4a13b2923ce286b986e44d4f7ae70f3
SHA1

28e066d6b5b240a072a755ccdf187a6670c0c2c5
SHA256

b936f157fc8844abe2a98da8e8df696570d8506a60b7af37ff0b23e8c1d04585
SHA512

7095fb45a85a17f3af2042a0e23a6c1580e0dbcbcfc481582129cd4307a9790bbea0e725843b62d23ee54ae21167ccdcda840288a63c6d8bafc6147ad31c4d3b
SSDEEP

98304:kB0mBjglXtoQ5sKfCIfRg+BTCItpvVwTFnzDCBbC0KH2Bx7VIH:S0mB6BfR7CItpvCTFyBbsy4

Score

10^/10

Malware Config

Extracted

Family

lumma

C2

https://powerful-avoids.sbs

https://motion-treesz.sbs

https://disobey-curly.sbs

https://leg-sate-boat.sbs

https://story-tense-faz.sbs

https://blade-govern.sbs

https://occupy-blushi.sbs

https://frogs-severz.sbs

https://property-imper.sbs

Targets

- Target
  
  2096-3-0x0000000000BE0000-0x00000000010A1000-memory.dmp
- Size
  
  4.8MB
- MD5
  
  b4a13b2923ce286b986e44d4f7ae70f3
- SHA1
  
  28e066d6b5b240a072a755ccdf187a6670c0c2c5
- SHA256
  
  b936f157fc8844abe2a98da8e8df696570d8506a60b7af37ff0b23e8c1d04585
- SHA512
  
  7095fb45a85a17f3af2042a0e23a6c1580e0dbcbcfc481582129cd4307a9790bbea0e725843b62d23ee54ae21167ccdcda840288a63c6d8bafc6147ad31c4d3b
- SSDEEP
  
  98304:kB0mBjglXtoQ5sKfCIfRg+BTCItpvVwTFnzDCBbC0KH2Bx7VIH:S0mB6BfR7CItpvCTFyBbsy4
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2