General

  • Target

    fcff3ae0e71747322f9c628736788ceb419c9f04bdfa8a5bdb3a628e8d91af6e.exe

  • Size

    458KB

  • Sample

    241127-dsdxzatre1

  • MD5

    666df1d57e2a047b9edc5a7ad3525ea0

  • SHA1

    92b4144346f873d5afc2e528f914afa6c7323fef

  • SHA256

    fcff3ae0e71747322f9c628736788ceb419c9f04bdfa8a5bdb3a628e8d91af6e

  • SHA512

    3a114e0c3412c8396f40191ebc24d44733f8ebf35b72ad3a4ed26691174de5292fe4213b72d1034262ff16616d5cf01703058a61c4a578773d16f728db082b1d

  • SSDEEP

    12288:rV4fznms9AoyEFsjsXYTQskzO5BWgr2Klr7v:ruyXjsXY+zO5BdJr7v

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://powerful-avoids.sbs

https://motion-treesz.sbs

https://disobey-curly.sbs

https://leg-sate-boat.sbs

https://story-tense-faz.sbs

https://blade-govern.sbs

https://occupy-blushi.sbs

https://frogs-severz.sbs

Extracted

Family

lumma

C2

https://blade-govern.sbs/api

https://story-tense-faz.sbs/api

Targets

    • Target

      fcff3ae0e71747322f9c628736788ceb419c9f04bdfa8a5bdb3a628e8d91af6e.exe

    • Size

      458KB

    • MD5

      666df1d57e2a047b9edc5a7ad3525ea0

    • SHA1

      92b4144346f873d5afc2e528f914afa6c7323fef

    • SHA256

      fcff3ae0e71747322f9c628736788ceb419c9f04bdfa8a5bdb3a628e8d91af6e

    • SHA512

      3a114e0c3412c8396f40191ebc24d44733f8ebf35b72ad3a4ed26691174de5292fe4213b72d1034262ff16616d5cf01703058a61c4a578773d16f728db082b1d

    • SSDEEP

      12288:rV4fznms9AoyEFsjsXYTQskzO5BWgr2Klr7v:ruyXjsXY+zO5BdJr7v

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks