Overview

overview

10

Static

static

1

111a3a163d...db.exe

windows10-2004-x64

10

111a3a163d...db.exe

windows11-21h2-x64

10

Resubmissions

03-01-2025 18:46

250103-xey6jaxpct 10

03-01-2025 18:36

250103-w9dyeazpck 10

03-01-2025 18:30

250103-w5lgpazmfq 10

03-01-2025 05:20

250103-f1hl8s1kfs 10

03-01-2025 05:16

250103-fx5mlatmck 10

03-01-2025 05:10

250103-ftrlkatldn 10

03-01-2025 05:08

250103-fsh8sstlap 10

30-12-2024 05:30

241230-f67tbazkdz 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    111a3a163d489dfd138d482335216ac16fe2808a36d4508d074696609f2ac6db.zip

  • Size

    563KB

  • Sample

    250103-f1hl8s1kfs

  • MD5

    956c90a95e6e640f24d2fa8e03dbb145

  • SHA1

    6ed330ad442c53c05ce48b306be888a97bf8c88c

  • SHA256

    111a3a163d489dfd138d482335216ac16fe2808a36d4508d074696609f2ac6db

  • SHA512

    c7051a4881bad5eba5d0039c3cb7f5eb0cfb6506f585dc0985ccb527439768ac5075564be43486ded5cc59d1aa4690a5052399f99108af5500cdeb611f8a6d48

  • SSDEEP

    12288:JYO6Dqzihouxpa+yWz2qRPmZqaKS6gfb3e82flYDXCOEO:OO6DThou2+y02TZqa97b3effyXXt

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://hummskitnj.buzz/api

https://cashfuzysao.buzz/api

https://appliacnesot.buzz/api

https://screwamusresz.buzz/api

https://inherineau.buzz/api

https://scentniej.buzz/api

https://rebuildeso.buzz/api

https://prisonyfork.buzz/api

https://mindhandru.buzz/api

Targets

    • Target

      111a3a163d489dfd138d482335216ac16fe2808a36d4508d074696609f2ac6db.zip

    • Size

      563KB

    • MD5

      956c90a95e6e640f24d2fa8e03dbb145

    • SHA1

      6ed330ad442c53c05ce48b306be888a97bf8c88c

    • SHA256

      111a3a163d489dfd138d482335216ac16fe2808a36d4508d074696609f2ac6db

    • SHA512

      c7051a4881bad5eba5d0039c3cb7f5eb0cfb6506f585dc0985ccb527439768ac5075564be43486ded5cc59d1aa4690a5052399f99108af5500cdeb611f8a6d48

    • SSDEEP

      12288:JYO6Dqzihouxpa+yWz2qRPmZqaKS6gfb3e82flYDXCOEO:OO6DThou2+y02TZqa97b3effyXXt

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks