Overview

overview

10

Static

static

3

2024-12-30...ch.exe

windows7-x64

10

2024-12-30...ch.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-30_d1e4d56cf9a3ec77580b57579cbf112c_frostygoop_poet-rat_snatch

  • Size

    31.5MB

  • Sample

    241230-b9qlzstney

  • MD5

    d1e4d56cf9a3ec77580b57579cbf112c

  • SHA1

    4715f5752cc26a758f7ea3f95dc930ff42d83547

  • SHA256

    a39a714a53e145bbcec83a78637df2974b680b7bdc110ba824d4b16ff96325f4

  • SHA512

    da8546820a0c87ef47ae173b4fed2822aafbb06e69dc7b892b0188a750f74b712c6d188d84d7aaafdeb551da51096352be8feb519f03ff67d402261c8ad9dbb7

  • SSDEEP

    196608:9pBAJH9GObp2lxc9ohPVUHBtDIzMnPBEIeTLCHDJHGzFeEUuFFFFFFFFFFFFFFFN:hA4cqIhtDIwnp0TL2JmAEUYJ0W

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://sordid-snaked.cyou/api

https://awake-weaves.cyou/api

https://wrathful-jammy.cyou/api

https://debonairnukk.xyz/api

https://diffuculttan.xyz/api

https://effecterectz.xyz/api

https://deafeninggeh.biz/api

https://immureprech.biz/api

Targets

    • Target

      2024-12-30_d1e4d56cf9a3ec77580b57579cbf112c_frostygoop_poet-rat_snatch

    • Size

      31.5MB

    • MD5

      d1e4d56cf9a3ec77580b57579cbf112c

    • SHA1

      4715f5752cc26a758f7ea3f95dc930ff42d83547

    • SHA256

      a39a714a53e145bbcec83a78637df2974b680b7bdc110ba824d4b16ff96325f4

    • SHA512

      da8546820a0c87ef47ae173b4fed2822aafbb06e69dc7b892b0188a750f74b712c6d188d84d7aaafdeb551da51096352be8feb519f03ff67d402261c8ad9dbb7

    • SSDEEP

      196608:9pBAJH9GObp2lxc9ohPVUHBtDIzMnPBEIeTLCHDJHGzFeEUuFFFFFFFFFFFFFFFN:hA4cqIhtDIwnp0TL2JmAEUYJ0W

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks