General

  • Target

    7c13fd5a81f9aeca85799bc1cff61329599d032569287d8b2db7b43d3a51df30N.exe

  • Size

    797KB

  • Sample

    250103-m3fzrazles

  • MD5

    287009edb0ce8e161d3a6328864fcf30

  • SHA1

    888dffb2851bae70ceeaf18d0ab2abd6361d3976

  • SHA256

    7c13fd5a81f9aeca85799bc1cff61329599d032569287d8b2db7b43d3a51df30

  • SHA512

    d56db6586ccf6baa98e5d012f24c904067bf20b5c3e27d3fd48507b5a7ef638b3cce3f08c7777b9438089966d9391499061a7a49d77e60aca2bcee9e29f197a6

  • SSDEEP

    24576:BK1PSMZcebOLk5iXTQs7HebOLk5iXTQs7m:E1PS498mMQc+8mMQcm

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Extracted

Family

lumma

C2

https://abruptyopsn.shop/api

https://wholersorie.shop/api

https://framekgirus.shop/api

https://tirepublicerj.shop/api

https://noisycuttej.shop/api

https://rabidcowse.shop/api

https://cloudewahsj.shop/api

Targets

    • Target

      7c13fd5a81f9aeca85799bc1cff61329599d032569287d8b2db7b43d3a51df30N.exe

    • Size

      797KB

    • MD5

      287009edb0ce8e161d3a6328864fcf30

    • SHA1

      888dffb2851bae70ceeaf18d0ab2abd6361d3976

    • SHA256

      7c13fd5a81f9aeca85799bc1cff61329599d032569287d8b2db7b43d3a51df30

    • SHA512

      d56db6586ccf6baa98e5d012f24c904067bf20b5c3e27d3fd48507b5a7ef638b3cce3f08c7777b9438089966d9391499061a7a49d77e60aca2bcee9e29f197a6

    • SSDEEP

      24576:BK1PSMZcebOLk5iXTQs7HebOLk5iXTQs7m:E1PS498mMQc+8mMQcm

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks