General

  • Target

    Setup.exe

  • Size

    70.0MB

  • Sample

    250102-2zttrsyqay

  • MD5

    f12e87197e19cb59d8495f03cac277b2

  • SHA1

    34eb2318335988399bc25702a0d557f8c3101f11

  • SHA256

    3bdc57e936012fc092277a2e3d719e4ef00d476198f13d1fff180b6c49f81a6d

  • SHA512

    eecbecbd873e24221ca28dfbbb9edb5b33853c5790e7ec8342e19e969f0077d9d2528a7c13b4e9f4e0b4386508a9efcc95fb9ff1d4744f45f84141f2838f2b68

  • SSDEEP

    24576:cv29nUaE0Nkgh3hiC3zfJhS+bQfn+pVqo7VaLGL/23ry:ywnUCdhx9c/+pVlhaiCu

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Extracted

Family

lumma

C2

https://abruptyopsn.shop/api

https://wholersorie.shop/api

https://framekgirus.shop/api

https://tirepublicerj.shop/api

https://noisycuttej.shop/api

https://rabidcowse.shop/api

https://cloudewahsj.shop/api

Targets

    • Target

      Setup.exe

    • Size

      70.0MB

    • MD5

      f12e87197e19cb59d8495f03cac277b2

    • SHA1

      34eb2318335988399bc25702a0d557f8c3101f11

    • SHA256

      3bdc57e936012fc092277a2e3d719e4ef00d476198f13d1fff180b6c49f81a6d

    • SHA512

      eecbecbd873e24221ca28dfbbb9edb5b33853c5790e7ec8342e19e969f0077d9d2528a7c13b4e9f4e0b4386508a9efcc95fb9ff1d4744f45f84141f2838f2b68

    • SSDEEP

      24576:cv29nUaE0Nkgh3hiC3zfJhS+bQfn+pVqo7VaLGL/23ry:ywnUCdhx9c/+pVlhaiCu

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks