General

  • Target

    c58fa8b1892d11fcce2893e637734a00.bin

  • Size

    1.3MB

  • Sample

    250103-b2vkzaxkhk

  • MD5

    96d7d2ad73694ac5bd5232c6623dd36f

  • SHA1

    709dc2054bd9aeb15edf7cc2a567eadc3c007627

  • SHA256

    fd1db501d98e7f171ee891d14b987831ae093178df798e130a4a0e4078e16e48

  • SHA512

    a0ab246e478c8adc3de7afbbdd02bd8111c28825b22741b7b38f43ca757e29f6c9cd9c74e2439e8238ff44c8a4f391663d3f4d6643657fb812fa7ef8815864bf

  • SSDEEP

    24576:kge62KwFHL4Y7mvXSDaZJ4PfNZsPZQ23QUjqW4vpUtI4rIZD8W/YZTzZwOy:Fe62KSHcY7mCaZJINZmW23BjqxpUt+y0

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Extracted

Family

lumma

C2

https://abruptyopsn.shop/api

https://wholersorie.shop/api

https://framekgirus.shop/api

https://tirepublicerj.shop/api

https://rabidcowse.shop/api

https://cloudewahsj.shop/api

https://noisycuttej.shop/api

Targets

    • Target

      3970f1b64c122f1d7917d4558747f4c91295f8d03b62cfa7ac0e5bf0f0c8b9a6.exe

    • Size

      72.4MB

    • MD5

      c58fa8b1892d11fcce2893e637734a00

    • SHA1

      2b9a6350ed380ba9d025dcdff6c11a6b7533138f

    • SHA256

      3970f1b64c122f1d7917d4558747f4c91295f8d03b62cfa7ac0e5bf0f0c8b9a6

    • SHA512

      7fe0f4290c5148d9d9e36a67e1f493035fd4a7bea530ff1775012794f94b44ac710f6694bd394471ccdac1a4cacd7f4ffae83af8533799b7887a1f01c131286f

    • SSDEEP

      24576:8tdAm9DUi/CR3wCkCiRgoG7hB0hHkbEXXeG/jFt5JpoTx9aqi4M6OlCp3Qq/J:kqTytRdk6ek1Gi4JB

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

MITRE ATT&CK Enterprise v15

Tasks