General

  • Target

    loader.exe

  • Size

    802KB

  • Sample

    250101-x1ptzszjfx

  • MD5

    aa84ce517edfd98484d49ef958172493

  • SHA1

    3685e28b56231d233c87a12368a1a2ef1095ffc1

  • SHA256

    1cb179d72f66c29e94484c9f6ed9b47af85617d477b1a50862db0131c766a69d

  • SHA512

    f0e52c0ebf2a5537fe7c16794d52e89be4a0eb60121aa861dac9d791d7f6f77e4bed5161383e4f835738a40f5ce0d3967a62cb19206b74ebdd3b6e28f5ad3037

  • SSDEEP

    24576:eB2uFkvh/QJITNihMiT4rTJITNihMiT4r2t:eB2lBIhMiT2gIhMiT2G

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://fancywaxxers.shop/api

Extracted

Family

lumma

C2

https://fancywaxxers.shop/api

https://abruptyopsn.shop/api

https://wholersorie.shop/api

https://framekgirus.shop/api

https://tirepublicerj.shop/api

https://noisycuttej.shop/api

https://rabidcowse.shop/api

https://cloudewahsj.shop/api

Targets

    • Target

      loader.exe

    • Size

      802KB

    • MD5

      aa84ce517edfd98484d49ef958172493

    • SHA1

      3685e28b56231d233c87a12368a1a2ef1095ffc1

    • SHA256

      1cb179d72f66c29e94484c9f6ed9b47af85617d477b1a50862db0131c766a69d

    • SHA512

      f0e52c0ebf2a5537fe7c16794d52e89be4a0eb60121aa861dac9d791d7f6f77e4bed5161383e4f835738a40f5ce0d3967a62cb19206b74ebdd3b6e28f5ad3037

    • SSDEEP

      24576:eB2uFkvh/QJITNihMiT4rTJITNihMiT4r2t:eB2lBIhMiT2gIhMiT2G

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks