General

  • Target

    3fd5d1dbae3317e84733fdd058e03a1e8831b0cb092964dfb113474fb4387efc.zip

  • Size

    18.0MB

  • Sample

    241230-f7keeazlfl

  • MD5

    65674562a9a8f625bc95c7727aa8fc15

  • SHA1

    032c6ffe1a71bcbd48c0b6135052fd8c99fb4edb

  • SHA256

    3fd5d1dbae3317e84733fdd058e03a1e8831b0cb092964dfb113474fb4387efc

  • SHA512

    ff4844a7c3e17afe5c9edf2f8e1eeeff151eccaa9c90cc79bd50abfe7b91edda46fea2b1d96bc7051b0bcaab80d761dd77b837eb885dbc360adeee66886d926c

  • SSDEEP

    393216:lG7g5vvW61K3C+KA7dCcBGHZjZrld3lvT+jkQ92+CchwGkBzJgT/5l4TKk:lGSvWUA7T6jF73lvTECcRkDgr5l4L

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://reinfomarbke.site/api

https://monopuncdz.site/api

https://unityshootsz.site/api

https://moeventmynz.site/api

https://plaintifuf.site/api

https://honerstyzu.site/api

https://bringlanejk.site/api

https://uppermixturyz.site/api

Targets

    • Target

      Setup.exe

    • Size

      651.4MB

    • MD5

      8604e4bdf9de6a0ae82aa30e6bb5841e

    • SHA1

      8535e889bc6a0757274081e52fdab90ea2090ae6

    • SHA256

      27196952aca14c796138426eb8f52b0ddafc9f46d0e4c10f750cfee95bf5132c

    • SHA512

      8a0d003df564bedd3b748955b2b2efd6079d03b73ea56ff6e3bb77fd8f54c500e683107fdc64d4df71dfcba90b275066b3d627422bef0a217dbbcfffc5b00ebe

    • SSDEEP

      196608:ZAa/L5xk1ABsdnCdTy9w6wzWvnP4O7NADtV6v+4cU9UryCjh9WmilQDpMVo0hnXy:j/L50mq9w6hvX7

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks