General

  • Target

    1600b43fca95bdb0094431510d5a797404197f9acc1d174da4262695479d7407.zip

  • Size

    4.8MB

  • Sample

    241230-f69ynszlbm

  • MD5

    1d1768f3787974fbef16f0c1e34c6908

  • SHA1

    d1dbcda8a99d37c137e6e472213b059b504cd3da

  • SHA256

    1600b43fca95bdb0094431510d5a797404197f9acc1d174da4262695479d7407

  • SHA512

    a0931c2e3f5e1abc43266fc656ea586809623b57579e7ad328c7eccbe5b81f278d6f55341495f3b1ad5489d1de5cc1aedca425a1c4604dc03a22cf631d82af98

  • SSDEEP

    98304:0bYwpwSASMNyR/RaZBSgZaxvqPYLxIehtE8ePg5fdtcX:uALIomSALxIcZnJdmX

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://servicedny.site/api

https://authorisev.site/api

https://faulteyotk.site/api

https://dilemmadu.site/api

https://contemteny.site/api

https://goalyfeastz.site/api

https://opposezmny.site/api

https://seallysl.site/api

https://pastelyki.cyou/api

Targets

    • Target

      Set-up.exe

    • Size

      909.6MB

    • MD5

      fe6e402dffc0381a78a598b4b6c095cd

    • SHA1

      d8359088802d926d714ecc5f99a573999e17a330

    • SHA256

      3dc2f5e52008f23dacc559144685efebc717b189e1e6619465624fabcf4d6d24

    • SHA512

      5ee0799c25e06c8f6952a7a2f2dfbed45995d2f6d14a7fb31168c3b9a59a10cb82f6eb2269a7d2cf1ea825033d171732399efc217693febbb998765382f5bf15

    • SSDEEP

      98304:VXZV2lM1tyUNHO2lOgbnDBvTp/ZLiS2gEYsz/1oYfG+5qZufnbQOE133:HV2pUVVjLiS23oYhnbHg

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks