General

  • Target

    Se-up.exe.vir

  • Size

    2.6MB

  • Sample

    241226-es3rrswrcm

  • MD5

    6ee6f625588a7a979f1e930e8c18e1dd

  • SHA1

    8fe5be4b2e4e18e0bf83b6110c83ab01a96e45b9

  • SHA256

    e95ed4c79ae3ac82732a1b92bce310834bc81b93480916840a03061232878d36

  • SHA512

    4247ceeadff1d8cbf6057dec777cbbaf1d8d66990b5400adabb8214a73c46dd8641e975957dbe516d0843d70cbc658eb5d39d30508dd121fc17725dc95ef1b82

  • SSDEEP

    49152:IjgyGD6BzaNQPHyh4YA+TNj+hrbpwj+hrbpO7oBke:IjFXzaNVHj+hrbpwj+hrbpkoB

Malware Config

Extracted

Family

lumma

Targets

    • Target

      Se-up.exe.vir

    • Size

      2.6MB

    • MD5

      6ee6f625588a7a979f1e930e8c18e1dd

    • SHA1

      8fe5be4b2e4e18e0bf83b6110c83ab01a96e45b9

    • SHA256

      e95ed4c79ae3ac82732a1b92bce310834bc81b93480916840a03061232878d36

    • SHA512

      4247ceeadff1d8cbf6057dec777cbbaf1d8d66990b5400adabb8214a73c46dd8641e975957dbe516d0843d70cbc658eb5d39d30508dd121fc17725dc95ef1b82

    • SSDEEP

      49152:IjgyGD6BzaNQPHyh4YA+TNj+hrbpwj+hrbpO7oBke:IjFXzaNVHj+hrbpwj+hrbpkoB

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader First Stage

MITRE ATT&CK Enterprise v15

Tasks