Overview

overview

10

Static

static

1

Loader.exe

windows10-2004-x64

10

Loader.exe

windows11-21h2-x64

10

Resubmissions

04-01-2025 01:01

250104-bdpptaspd1 10

04-01-2025 00:57

250104-ba6h6avmhp 10

04-01-2025 00:49

250104-a6k2navkhr 10

04-01-2025 00:42

250104-a2lgmavjbp 10

04-01-2025 00:36

250104-ax6a8s1rcz 10

04-01-2025 00:31

250104-avh3xs1qa1 10

04-01-2025 00:29

250104-asx43a1pdw 10

04-01-2025 00:25

250104-aq52wstnbk 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Loader.exe

  • Size

    381KB

  • Sample

    250104-ba6h6avmhp

  • MD5

    e37c6fb17af3c80377cf78f861c0bd80

  • SHA1

    9b7a465d5e118453b794e577d01d0865b54ee663

  • SHA256

    9c4b510c6b65c6fa54a2308b743ecb89dcbd44e9d039c890dc32c75ccf1538e8

  • SHA512

    623e51f357d4fc054421f817931914dba0cc5bb92ca771f00376c4824d5366972b76c2efce6cfd284331f05008813ebfb1d75e4ea72fd92eab4ae3df9714b88e

  • SSDEEP

    6144:72pwktDrDuMtoAAAySseHfMM/rE3jaIgHT2nC0osguHJL4jG9vKNfuCIO4+hQ3PC:L4C/AFseHEj+IgHTTOg8LDyNijZkZETm

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Extracted

Family

lumma

C2

https://abruptyopsn.shop/api

https://wholersorie.shop/api

https://framekgirus.shop/api

https://tirepublicerj.shop/api

https://noisycuttej.shop/api

https://rabidcowse.shop/api

https://cloudewahsj.shop/api

Targets

    • Target

      Loader.exe

    • Size

      381KB

    • MD5

      e37c6fb17af3c80377cf78f861c0bd80

    • SHA1

      9b7a465d5e118453b794e577d01d0865b54ee663

    • SHA256

      9c4b510c6b65c6fa54a2308b743ecb89dcbd44e9d039c890dc32c75ccf1538e8

    • SHA512

      623e51f357d4fc054421f817931914dba0cc5bb92ca771f00376c4824d5366972b76c2efce6cfd284331f05008813ebfb1d75e4ea72fd92eab4ae3df9714b88e

    • SSDEEP

      6144:72pwktDrDuMtoAAAySseHfMM/rE3jaIgHT2nC0osguHJL4jG9vKNfuCIO4+hQ3PC:L4C/AFseHEj+IgHTTOg8LDyNijZkZETm

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks