General

  • Target

    a9345000b80b1dd7e5ab5f1491771d39230c83311a1f1b98502f07df453ef02c.exe

  • Size

    554KB

  • Sample

    250102-cv9a8aykby

  • MD5

    976a25d2fed5fc7c8700588a33c6826c

  • SHA1

    cce0da8a52a534d6252e716f8476193587e84745

  • SHA256

    a9345000b80b1dd7e5ab5f1491771d39230c83311a1f1b98502f07df453ef02c

  • SHA512

    d00f6e9841175880be5083b950a62b97b5496f461cb96b51a9332166e90969871127cc056265f23d5f7692a886227045173ce6439a42eca9c1b31af4fc399564

  • SSDEEP

    12288:oYO6Dqzihouxpa+yWTKbuQ4bUJRNds4b/gCJPEO:tO6DThou2+yDbZkUJ3dsPIPt

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://hummskitnj.buzz/api

https://cashfuzysao.buzz/api

https://appliacnesot.buzz/api

https://screwamusresz.buzz/api

https://inherineau.buzz/api

https://scentniej.buzz/api

https://rebuildeso.buzz/api

https://prisonyfork.buzz/api

https://mindhandru.buzz/api

Targets

    • Target

      a9345000b80b1dd7e5ab5f1491771d39230c83311a1f1b98502f07df453ef02c.exe

    • Size

      554KB

    • MD5

      976a25d2fed5fc7c8700588a33c6826c

    • SHA1

      cce0da8a52a534d6252e716f8476193587e84745

    • SHA256

      a9345000b80b1dd7e5ab5f1491771d39230c83311a1f1b98502f07df453ef02c

    • SHA512

      d00f6e9841175880be5083b950a62b97b5496f461cb96b51a9332166e90969871127cc056265f23d5f7692a886227045173ce6439a42eca9c1b31af4fc399564

    • SSDEEP

      12288:oYO6Dqzihouxpa+yWTKbuQ4bUJRNds4b/gCJPEO:tO6DThou2+yDbZkUJ3dsPIPt

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks