General

  • Target

    Insomnia.zip

  • Size

    160.6MB

  • Sample

    250104-r7ygtawpal

  • MD5

    c654fe3ac13d7381357755cec81c86fc

  • SHA1

    9ee108a6a408432125e3ae8b14215fa43e29aa49

  • SHA256

    934b98909d53f6571dc3a5c357fbbb8a8e9fb5af46b3c77f11a9f6abcceafb38

  • SHA512

    e56a7c073689f2739561e4611acb4a9533858a4089065711c39605c8e8765b85808271b7012160be9cd5cddda53bc8835227557aea66f30850224831c94fad2c

  • SSDEEP

    3145728:zvRQc9ujylZkkjS4YMOyEXrgHTSkJc0/5n3adrWXJsK:9TojUiKYxTXrme0Jcrm/

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://abruptyopsn.shop/api

https://wholersorie.shop/api

https://framekgirus.shop/api

https://tirepublicerj.shop/api

https://noisycuttej.shop/api

https://rabidcowse.shop/api

https://cloudewahsj.shop/api

Targets

    • Target

      Insomnia.zip

    • Size

      160.6MB

    • MD5

      c654fe3ac13d7381357755cec81c86fc

    • SHA1

      9ee108a6a408432125e3ae8b14215fa43e29aa49

    • SHA256

      934b98909d53f6571dc3a5c357fbbb8a8e9fb5af46b3c77f11a9f6abcceafb38

    • SHA512

      e56a7c073689f2739561e4611acb4a9533858a4089065711c39605c8e8765b85808271b7012160be9cd5cddda53bc8835227557aea66f30850224831c94fad2c

    • SSDEEP

      3145728:zvRQc9ujylZkkjS4YMOyEXrgHTSkJc0/5n3adrWXJsK:9TojUiKYxTXrme0Jcrm/

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Executes dropped EXE

    • Target

      Insomnia_(password_2222).zip

    • Size

      160.8MB

    • MD5

      fb98ddcf0332d27b4a1dc15941d901e4

    • SHA1

      4a5430446cf40e53d9a9454fcf907d5be5c6d5a1

    • SHA256

      160de07984d221a3ca822fbee04a330d4a74f3ea60702fd41fa44b947b6213f0

    • SHA512

      453def6746c56b3602a901b18c29526d34d00ba55923915ebccfcdfe6f82a0ffd6b2d3dc1b05660bf040157cc6e8500d201a04f2d7b8f55a291e28e72d4797e4

    • SSDEEP

      3145728:uxMyQ4J0jZE0hYM8S0M+BVUdlIwjgQJV7Bw/3SnWN:KZJWyC8bJBVEuQD43Wk

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks