General

  • Target

    ae6bd3b195dd0a5adc6629bae4cd297bb33ae118f8de11b4f885068829de0f7b

  • Size

    438KB

  • Sample

    241127-dc6ytatkaw

  • MD5

    a1f9933f151e127f4fc7ff82ad38d2a7

  • SHA1

    135f68fc2c89cca9a3d3027c3975d841e4d62323

  • SHA256

    ae6bd3b195dd0a5adc6629bae4cd297bb33ae118f8de11b4f885068829de0f7b

  • SHA512

    25320a2c3425be6deda37597ceb0e46e4f6875a006179fa04279c3d869844de1e073874499da14ba3260bcea5ec3d6f5c0919986a2242445a7d9f1bd71c91d05

  • SSDEEP

    12288:Ys9eQagJtAld4MknEv7gUz05CD1IsHPBdmrv:TeMJtAldRz05oGMdO

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://barebrilliancedkoso.shop/api

https://parallelmercywksoffw.shop/api

https://ohfantasyproclaiwlo.shop/api

https://landdumpycolorwskfw.shop/api

https://flourhishdiscovrw.shop/api

https://conferencefreckewl.shop/api

https://notoriousdcellkw.shop/api

https://liabiliytshareodlkv.shop/api

Targets

    • Target

      ae6bd3b195dd0a5adc6629bae4cd297bb33ae118f8de11b4f885068829de0f7b

    • Size

      438KB

    • MD5

      a1f9933f151e127f4fc7ff82ad38d2a7

    • SHA1

      135f68fc2c89cca9a3d3027c3975d841e4d62323

    • SHA256

      ae6bd3b195dd0a5adc6629bae4cd297bb33ae118f8de11b4f885068829de0f7b

    • SHA512

      25320a2c3425be6deda37597ceb0e46e4f6875a006179fa04279c3d869844de1e073874499da14ba3260bcea5ec3d6f5c0919986a2242445a7d9f1bd71c91d05

    • SSDEEP

      12288:Ys9eQagJtAld4MknEv7gUz05CD1IsHPBdmrv:TeMJtAldRz05oGMdO

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks