General

  • Target

    2025-01-02_87f2605227a67a634902d9f1258c53f8_magniber

  • Size

    5.1MB

  • Sample

    250102-bzdjnswlez

  • MD5

    87f2605227a67a634902d9f1258c53f8

  • SHA1

    62b8d0d28f1a4416a3358e13c8659e5b18ec00ee

  • SHA256

    fd1460f26b3a593a8e2b70c82567c8ce02a9c90b5b2a090846d86b015784f27f

  • SHA512

    78e9e8961150ceea793a4cc8eb2fdce81c84c3071ac6c89cc63c1b2adc0cb746bc1bb0bcb58e957d0a7195a86a3ff60d0ef02820a69b5c1bdd5063fdea695962

  • SSDEEP

    49152:4NuYWEYKkHFfTvBJEvUf2vtY7uRfbQswUZcSByYGv5uuv/DYi35PB+MTRx2VT4Gk:4NhWqQFfTjEvUfH7ul5ApZdec

Score
10/10

Malware Config

Extracted

Family

lumma

Targets

    • Target

      2025-01-02_87f2605227a67a634902d9f1258c53f8_magniber

    • Size

      5.1MB

    • MD5

      87f2605227a67a634902d9f1258c53f8

    • SHA1

      62b8d0d28f1a4416a3358e13c8659e5b18ec00ee

    • SHA256

      fd1460f26b3a593a8e2b70c82567c8ce02a9c90b5b2a090846d86b015784f27f

    • SHA512

      78e9e8961150ceea793a4cc8eb2fdce81c84c3071ac6c89cc63c1b2adc0cb746bc1bb0bcb58e957d0a7195a86a3ff60d0ef02820a69b5c1bdd5063fdea695962

    • SSDEEP

      49152:4NuYWEYKkHFfTvBJEvUf2vtY7uRfbQswUZcSByYGv5uuv/DYi35PB+MTRx2VT4Gk:4NhWqQFfTjEvUfH7ul5ApZdec

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks