General

  • Target

    b62540b3978ac2dda8a8ed986961e79d87e0a74a5de57a460d745ee290ced15c.zip

  • Size

    11.1MB

  • Sample

    241230-f7f2zszldr

  • MD5

    2fedd21866c86695b7add31f956a643d

  • SHA1

    e744890762200a610919e0a13624eb9baf50a0c9

  • SHA256

    b62540b3978ac2dda8a8ed986961e79d87e0a74a5de57a460d745ee290ced15c

  • SHA512

    2fac8e89018e609ad6d4d6a25b0290cdc2d46ecb821c26a3432fb35f8908fc5938c45733619509f8b32070f60b9ec7e41e56a5a370f08fd7b70a722c6624e70d

  • SSDEEP

    196608:o6mpVziTByNeUQhGpeFIAKRi0JdsWCVQtQqwUeH4mYCgtGhQm/i:oBV2IU5opejKRDItQtQXUeH4msIb/i

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://servicedny.site/api

https://authorisev.site/api

https://faulteyotk.site/api

https://dilemmadu.site/api

https://contemteny.site/api

https://goalyfeastz.site/api

https://opposezmny.site/api

https://seallysl.site/api

https://studentyjw.cyou/api

Targets

    • Target

      unlock huawei sigma key cracked.exe

    • Size

      872.1MB

    • MD5

      567e6ce26ea1a7e6a09a16cbbe044eec

    • SHA1

      38ecaf1253a7440600f35a6c15eb3121db04cdb1

    • SHA256

      51873a9b1301c12e9d994af263eb8dbb5643be2ef1bcf3b4040558a247cffc8e

    • SHA512

      52f075b3e4ebbec0866b7e4a1344295834c5d5eeb84609eb78d6360fa8974046c34cef505db1ac29cf6f9c91a527170b2925e9b6df55ef5251d74b177f167d76

    • SSDEEP

      786432:vKZYengQODTqpkH7a0+RQCI4ZUXKNZMpSxW1IjOZU3ZzBvSix:/TC0+RQCIoMpSxTZFvSix

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks