General

  • Target

    8fc9f09b3f2424d918b5e8ddcede5980b6e6b356bb2e50873cf6eda804c01886

  • Size

    624KB

  • Sample

    250102-ccl3zayrcn

  • MD5

    f58afb7b8efffb002935d17d85765fb4

  • SHA1

    2506433dc55b8b42f94b70557ef444e8d05a17dc

  • SHA256

    8fc9f09b3f2424d918b5e8ddcede5980b6e6b356bb2e50873cf6eda804c01886

  • SHA512

    870fc5fb7ad167abb87645d43715c6642379948cb638c7efad19aa5d36ee251a0b54949ef5598e30a36e6d3bcb8d6027cf27dc60efcbeb8bc6164b2a9cdd1880

  • SSDEEP

    12288:3gF7Se1JDl5LVaL8kZIOWhbN4ddlannT5EbJ+vMvb4Yw8kU0khJ7x:3gF7Se1JQL8ekmd+TiF

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://hummskitnj.buzz/api

https://cashfuzysao.buzz/api

https://appliacnesot.buzz/api

https://screwamusresz.buzz/api

https://inherineau.buzz/api

https://scentniej.buzz/api

https://rebuildeso.buzz/api

https://prisonyfork.buzz/api

https://ingreem-eilish.biz/api

Targets

    • Target

      8fc9f09b3f2424d918b5e8ddcede5980b6e6b356bb2e50873cf6eda804c01886

    • Size

      624KB

    • MD5

      f58afb7b8efffb002935d17d85765fb4

    • SHA1

      2506433dc55b8b42f94b70557ef444e8d05a17dc

    • SHA256

      8fc9f09b3f2424d918b5e8ddcede5980b6e6b356bb2e50873cf6eda804c01886

    • SHA512

      870fc5fb7ad167abb87645d43715c6642379948cb638c7efad19aa5d36ee251a0b54949ef5598e30a36e6d3bcb8d6027cf27dc60efcbeb8bc6164b2a9cdd1880

    • SSDEEP

      12288:3gF7Se1JDl5LVaL8kZIOWhbN4ddlannT5EbJ+vMvb4Yw8kU0khJ7x:3gF7Se1JQL8ekmd+TiF

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks