General

  • Target

    4f55a7bc4bf1ead4bc5732f0db3e5837236f1fd51f8cd3c85263959336274b98N.exe

  • Size

    3.7MB

  • Sample

    250104-gcvsbsvmey

  • MD5

    2a8ea8281a15fab4d626220405456c70

  • SHA1

    ba081ee58bd856c5de412b70ee26dbbc09b055e7

  • SHA256

    4f55a7bc4bf1ead4bc5732f0db3e5837236f1fd51f8cd3c85263959336274b98

  • SHA512

    474f23e15ea1f94cbbe8a21dc02ce11ae71b39bb96820e597ff9169577d202ea12f97b6a4f067c33b7b2dec884bb2be171865588c69f7e61635f21c4551b0126

  • SSDEEP

    49152:9cWc+BmELGlkA0EhnZLLEXSHIv2IVADlZMy6M3amhITeL2Jx6RkIKyI8IDwJcTrp:9cW6KAder8ZzmPIe

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Extracted

Family

lumma

C2

https://framekgirus.shop/api

https://abruptyopsn.shop/api

https://wholersorie.shop/api

https://tirepublicerj.shop/api

https://noisycuttej.shop/api

https://rabidcowse.shop/api

https://cloudewahsj.shop/api

Targets

    • Target

      4f55a7bc4bf1ead4bc5732f0db3e5837236f1fd51f8cd3c85263959336274b98N.exe

    • Size

      3.7MB

    • MD5

      2a8ea8281a15fab4d626220405456c70

    • SHA1

      ba081ee58bd856c5de412b70ee26dbbc09b055e7

    • SHA256

      4f55a7bc4bf1ead4bc5732f0db3e5837236f1fd51f8cd3c85263959336274b98

    • SHA512

      474f23e15ea1f94cbbe8a21dc02ce11ae71b39bb96820e597ff9169577d202ea12f97b6a4f067c33b7b2dec884bb2be171865588c69f7e61635f21c4551b0126

    • SSDEEP

      49152:9cWc+BmELGlkA0EhnZLLEXSHIv2IVADlZMy6M3amhITeL2Jx6RkIKyI8IDwJcTrp:9cW6KAder8ZzmPIe

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks