General

  • Target

    #Pa$$w0rD__2343-0peɴ_Set-Uᴘ@ (2343).zip

  • Size

    12.6MB

  • Sample

    241230-k6fgaaxjd1

  • MD5

    e2a4ece377f33da8c9d7cb6286321397

  • SHA1

    383039521d92d112e4f7640f5ecf18e5286451bd

  • SHA256

    844daaa1105bc03ff465764c677d2a0d39098821c99c43809d9a34b5cb71210d

  • SHA512

    1b0794b97e5b16b263598427a770f376715dbf7bb8ae9d29fe637148fbfaab73fd915abe8fb23583354039e651b3ed51c01051cf067cbfb3f097c02f659db72c

  • SSDEEP

    196608:GTKeKl0mTJv6AWwwV9uU5Ejp1DQTWUhnDdaeXQP5jkg2kw2anUCxLcANPCt:bzVen9ujDMlDKBOkw2yUCxJNw

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Extracted

Family

lumma

C2

https://abruptyopsn.shop/api

https://wholersorie.shop/api

https://framekgirus.shop/api

https://tirepublicerj.shop/api

https://noisycuttej.shop/api

https://rabidcowse.shop/api

https://cloudewahsj.shop/api

Targets

    • Target

      #Pa$$w0rD__2343-0peɴ_Set-Uᴘ@.7z

    • Size

      12.6MB

    • MD5

      033abb46b54a58bf510cc09bb562b5a3

    • SHA1

      a632e329fd3b16afeec64441dc9194bc329dfa85

    • SHA256

      6421ac5db43628a20f68f02f0a379c8e90f9a7250bb0f5f5f293a58db1a5a43f

    • SHA512

      389f03ad82ffde5102f4bbb42026fdddccc92f2202562f474f05550b36173531d697bd7b9168ac74880325004425e1e74902a39c56b14f0adcfddc75fccee22a

    • SSDEEP

      196608:pTKeKl0mTJv6AWwwV9uU5Ejp1DQTWUhnDdaeXQP5jkg2kw2anUCxLcANPCF:MzVen9ujDMlDKBOkw2yUCxJNE

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks