General

  • Target

    e6e0f35cd360401b1973626cb35b635e86bd272b115852f07e434ac3fea0977a

  • Size

    482KB

  • Sample

    241127-xg1r5svqew

  • MD5

    ceaca4a19229c3283007e714466f51f8

  • SHA1

    e70dfeeea1cdfeae4da1e97d602867436062550d

  • SHA256

    e6e0f35cd360401b1973626cb35b635e86bd272b115852f07e434ac3fea0977a

  • SHA512

    950f5c81675af1deb78c7bdff6228d99036e14872e352176094967e721413ee50fcde9e4acd0843890b3152602830ba7f1bd5ebe81587c1391e8dfde0581f279

  • SSDEEP

    12288:yJB+nneDgkXFEIORLj5ZNS6HvkGRFKU84BmnYkVs:WAoR25Rv5Z4ivkwM0mYkVs

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://powerful-avoids.sbs

https://motion-treesz.sbs

https://disobey-curly.sbs

https://leg-sate-boat.sbs

https://story-tense-faz.sbs

https://blade-govern.sbs

https://occupy-blushi.sbs

https://frogs-severz.sbs

https://fumblingactor.cyou

Targets

    • Target

      e6e0f35cd360401b1973626cb35b635e86bd272b115852f07e434ac3fea0977a

    • Size

      482KB

    • MD5

      ceaca4a19229c3283007e714466f51f8

    • SHA1

      e70dfeeea1cdfeae4da1e97d602867436062550d

    • SHA256

      e6e0f35cd360401b1973626cb35b635e86bd272b115852f07e434ac3fea0977a

    • SHA512

      950f5c81675af1deb78c7bdff6228d99036e14872e352176094967e721413ee50fcde9e4acd0843890b3152602830ba7f1bd5ebe81587c1391e8dfde0581f279

    • SSDEEP

      12288:yJB+nneDgkXFEIORLj5ZNS6HvkGRFKU84BmnYkVs:WAoR25Rv5Z4ivkwM0mYkVs

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks