Overview

overview

10

Static

static

1

software.exe

windows7-x64

10

software.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    software.exe

  • Size

    2.7MB

  • Sample

    241127-rn6zvawrhv

  • MD5

    ad0dab5c50ed8d042ba99d5b88945f19

  • SHA1

    1cf68e671231f806176fe1996bd0bf193ffc2763

  • SHA256

    45a03ee471dab20a22d40a1eda9e9ffafb10b9074d422cef9d21719595965bc9

  • SHA512

    bdf7fe986928b6d879fc8a40f7e9e9fe5559da7976f89f2dd9f7cd0d5226d731ad50d07ee46e7d2fe4670752b54ffe9309371d9b116b0c0c5c78629ebb263ed7

  • SSDEEP

    49152:xt0WJo6iw2+BCBhyGDz7cep+/Cz3ddQn0xIpxg2Wv9SJu37U5HmQmU5HmQb:UQi2E9KidQn0xIpxg2Wv9unLnb

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://crib-endanger.sbs

https://faintbl0w.sbs

https://300snails.sbs

https://bored-light.sbs

https://3xc1aimbl0w.sbs

https://pull-trucker.sbs

https://fleez-inc.sbs

https://thicktoys.sbs

https://frogmen-smell.sbs

Extracted

Family

lumma

C2

https://frogmen-smell.sbs/api

Targets

    • Target

      software.exe

    • Size

      2.7MB

    • MD5

      ad0dab5c50ed8d042ba99d5b88945f19

    • SHA1

      1cf68e671231f806176fe1996bd0bf193ffc2763

    • SHA256

      45a03ee471dab20a22d40a1eda9e9ffafb10b9074d422cef9d21719595965bc9

    • SHA512

      bdf7fe986928b6d879fc8a40f7e9e9fe5559da7976f89f2dd9f7cd0d5226d731ad50d07ee46e7d2fe4670752b54ffe9309371d9b116b0c0c5c78629ebb263ed7

    • SSDEEP

      49152:xt0WJo6iw2+BCBhyGDz7cep+/Cz3ddQn0xIpxg2Wv9SJu37U5HmQmU5HmQb:UQi2E9KidQn0xIpxg2Wv9unLnb

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks