Overview

overview

10

Static

static

3

2025-01-02...ch.exe

windows7-x64

10

2025-01-02...ch.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-02_d864c06adc91193dc41ec03b46b10263_frostygoop_poet-rat_snatch

  • Size

    10.8MB

  • Sample

    250102-b89y8swrcs

  • MD5

    d864c06adc91193dc41ec03b46b10263

  • SHA1

    c131d440060a2d4f4f837acec3d428bf8b8ae7a5

  • SHA256

    7e0d8a189dda3f5f44d8e77145507c6046060f35a064e6d34e4d3ea1b7f0dbc1

  • SHA512

    0f11c2cbbbc1b2b357060366ea298300d03379b536d62b6df475963e2c49a5416627b9f1bfc4345af5967b047be41de54e28fcf3dd65079a7594826a16fb5296

  • SSDEEP

    98304:Mtiw+Q3EluknNJWLhL9L/PCldf/ppct/YjEj7xzrbSyWod:yiw+Wth8f/M/YG3bSyH

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://sordid-snaked.cyou/api

https://awake-weaves.cyou/api

https://wrathful-jammy.cyou/api

https://debonairnukk.xyz/api

https://diffuculttan.xyz/api

https://effecterectz.xyz/api

https://deafeninggeh.biz/api

https://immureprech.biz/api

Targets

    • Target

      2025-01-02_d864c06adc91193dc41ec03b46b10263_frostygoop_poet-rat_snatch

    • Size

      10.8MB

    • MD5

      d864c06adc91193dc41ec03b46b10263

    • SHA1

      c131d440060a2d4f4f837acec3d428bf8b8ae7a5

    • SHA256

      7e0d8a189dda3f5f44d8e77145507c6046060f35a064e6d34e4d3ea1b7f0dbc1

    • SHA512

      0f11c2cbbbc1b2b357060366ea298300d03379b536d62b6df475963e2c49a5416627b9f1bfc4345af5967b047be41de54e28fcf3dd65079a7594826a16fb5296

    • SSDEEP

      98304:Mtiw+Q3EluknNJWLhL9L/PCldf/ppct/YjEj7xzrbSyWod:yiw+Wth8f/M/YG3bSyH

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks