General

  • Target

    5dc32a33db2f76834c6e96336d4bbbf276bc0b6b6cc9c02ad004607008dbe91a

  • Size

    484KB

  • Sample

    241127-x3a4lswpgv

  • MD5

    ad5bf840b79922950cbcd853a3e56134

  • SHA1

    5fe0ffa06bc526355af0ca520aa1750aee6499ef

  • SHA256

    5dc32a33db2f76834c6e96336d4bbbf276bc0b6b6cc9c02ad004607008dbe91a

  • SHA512

    bb60b4d7e4df59c368d35c21dd7405c2bb22a86f2954593f6bc63deda326a9bef7e8020d63c09a178ad413bd8f459fecac817d569735ce3eb551b552bb95c2b4

  • SSDEEP

    12288:SJB+nneDgkXFEI3uutVNyjs86iAB4mapRngti:2AoR2vgVSs8fi4m6ai

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://powerful-avoids.sbs

https://motion-treesz.sbs

https://disobey-curly.sbs

https://leg-sate-boat.sbs

https://story-tense-faz.sbs

https://blade-govern.sbs

https://occupy-blushi.sbs

https://frogs-severz.sbs

Targets

    • Target

      5dc32a33db2f76834c6e96336d4bbbf276bc0b6b6cc9c02ad004607008dbe91a

    • Size

      484KB

    • MD5

      ad5bf840b79922950cbcd853a3e56134

    • SHA1

      5fe0ffa06bc526355af0ca520aa1750aee6499ef

    • SHA256

      5dc32a33db2f76834c6e96336d4bbbf276bc0b6b6cc9c02ad004607008dbe91a

    • SHA512

      bb60b4d7e4df59c368d35c21dd7405c2bb22a86f2954593f6bc63deda326a9bef7e8020d63c09a178ad413bd8f459fecac817d569735ce3eb551b552bb95c2b4

    • SSDEEP

      12288:SJB+nneDgkXFEI3uutVNyjs86iAB4mapRngti:2AoR2vgVSs8fi4m6ai

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks