General

  • Target

    f0552146aff29ddb6244788ac16bf06d7682a0af3c1b078d06f09f2e338c0994N.exe

  • Size

    792KB

  • Sample

    250104-1k216aynat

  • MD5

    b4d27565a2523d26becfb71875aded60

  • SHA1

    2143bcdeb2ab0f87aa50a4796aff61bbb231d01b

  • SHA256

    f0552146aff29ddb6244788ac16bf06d7682a0af3c1b078d06f09f2e338c0994

  • SHA512

    1c0cd390478144792a10aae8165ed5505a51289aff067c9d9702968d381d7d00ff1deaf129c00632f1d318fac336a3b5fd44db890aaa83374518f2a822d198d1

  • SSDEEP

    24576:f4dPpQPmFL8q2T7rFVcycL8q2T7rFVcyI:wdPp/F4qsJVU4qsJVw

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Extracted

Family

lumma

C2

https://abruptyopsn.shop/api

https://wholersorie.shop/api

https://framekgirus.shop/api

https://tirepublicerj.shop/api

https://noisycuttej.shop/api

https://rabidcowse.shop/api

https://cloudewahsj.shop/api

Targets

    • Target

      f0552146aff29ddb6244788ac16bf06d7682a0af3c1b078d06f09f2e338c0994N.exe

    • Size

      792KB

    • MD5

      b4d27565a2523d26becfb71875aded60

    • SHA1

      2143bcdeb2ab0f87aa50a4796aff61bbb231d01b

    • SHA256

      f0552146aff29ddb6244788ac16bf06d7682a0af3c1b078d06f09f2e338c0994

    • SHA512

      1c0cd390478144792a10aae8165ed5505a51289aff067c9d9702968d381d7d00ff1deaf129c00632f1d318fac336a3b5fd44db890aaa83374518f2a822d198d1

    • SSDEEP

      24576:f4dPpQPmFL8q2T7rFVcycL8q2T7rFVcyI:wdPp/F4qsJVU4qsJVw

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks