General

  • Target

    9ff5e6cb0fd29ce67a3c83b09a08cfc37e5eef51123338f085d14be6b93ff50e.zip

  • Size

    19.3MB

  • Sample

    241230-f7avzazlbr

  • MD5

    776bf1972c4c1e73f5b3469f7b2186be

  • SHA1

    5045bdb7fb206d0264d6b26d4afbdd40407c00b6

  • SHA256

    9ff5e6cb0fd29ce67a3c83b09a08cfc37e5eef51123338f085d14be6b93ff50e

  • SHA512

    5258f2bfe5f88df71a4b5c821ce3deb36eae73f55ddd589e565514bdee6761d7ef146709728c5afcab08297bf2fdd849c2e64fc849d655994b2ce9397f13dcb4

  • SSDEEP

    393216:Ncy4dXIWMJ/1hoE5hjbDftDy0cAE3bgKpJjOkPVdCPXdAdHalRU4AygbiTNJ/:Nf4WWMqE5hjfbsPbOXdAd6l5gbcz/

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://tamedgeesy.sbs/api

https://relalingj.sbs/api

https://rottieud.sbs/api

https://brownieyuz.sbs/api

https://explainvees.sbs/api

https://ducksringjk.sbs/api

https://thinkyyokej.sbs/api

https://repostebhu.sbs/api

https://boatfleshedbz.cyou/api

Targets

    • Target

      labels 4 after effects free download.exe

    • Size

      911.1MB

    • MD5

      47f78001b89fe3253264d1c4a7499112

    • SHA1

      56dac567c8cd116d2d1d81368780f5163a08ef1a

    • SHA256

      1f6d103331177d55c1559b4b35e17e1e46adc11e7c36f0128f7d428502f98c7d

    • SHA512

      3a302562e64b21288724ffff1a2760e10a83ab073a43a38be162b05c40df7c6a7f9d6506d91a22464b25b8650aed5a6adaa0c398a36e132ac489912737e32073

    • SSDEEP

      786432:8qxPIiniObTMvYFmZ1ABNJiKSpkBVZJZp1DKNSRczO9I/sGTsJyXFwait6Cv9j+E:fIini0pdp1DKQF9jIW

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks