General

  • Target

    Setup.exe

  • Size

    500KB

  • Sample

    250103-jhpvdavjaw

  • MD5

    23b1cc3633283ddc53079bfe24400e77

  • SHA1

    b05b9c023811879baf9bfdebd84f87cd592cb586

  • SHA256

    90e92ea3890eb56cd18543a15d1fe4d9abbb57a974451b52db7b6ec58de272b4

  • SHA512

    246fe47462507e2fe911ed85648ea5bd6199f46be94dfbd8f9b7b7f097fde93ba9f81186a5c919423f92e405d69f5cfb42a57c337d6c9160136c19f23e11f66d

  • SSDEEP

    12288:zztE0u86qlmk/tFsgMH+GsGde1vy0xt4K7wa07N:zO0uYlmsRMH4Koqqo7N

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://fancywaxxers.shop/api

Extracted

Family

lumma

C2

https://fancywaxxers.shop/api

https://abruptyopsn.shop/api

https://wholersorie.shop/api

https://framekgirus.shop/api

https://tirepublicerj.shop/api

https://noisycuttej.shop/api

https://rabidcowse.shop/api

https://cloudewahsj.shop/api

Targets

    • Target

      Setup.exe

    • Size

      500KB

    • MD5

      23b1cc3633283ddc53079bfe24400e77

    • SHA1

      b05b9c023811879baf9bfdebd84f87cd592cb586

    • SHA256

      90e92ea3890eb56cd18543a15d1fe4d9abbb57a974451b52db7b6ec58de272b4

    • SHA512

      246fe47462507e2fe911ed85648ea5bd6199f46be94dfbd8f9b7b7f097fde93ba9f81186a5c919423f92e405d69f5cfb42a57c337d6c9160136c19f23e11f66d

    • SSDEEP

      12288:zztE0u86qlmk/tFsgMH+GsGde1vy0xt4K7wa07N:zO0uYlmsRMH4Koqqo7N

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks