General

  • Target

    4a74d2cdb08c5ee72c580f980980ab9a49f7c91092e2d28a6567fe74f607f6d0N.exe

  • Size

    300KB

  • Sample

    250104-wrkcgasngq

  • MD5

    c239124b99ec303662ab9f6139f45a00

  • SHA1

    25e6aa87abee1666fad2f6fbf872c4c7c0975d5e

  • SHA256

    4a74d2cdb08c5ee72c580f980980ab9a49f7c91092e2d28a6567fe74f607f6d0

  • SHA512

    f4e4cf3f58de88de6f3c9587e360d43654b054e90c016b6a94f0c731d23a81c1075881632c3235e0db9d6ee728444ac6f8d96c0ed16a0bf27c1fd0066501689c

  • SSDEEP

    6144:8F2fA5BsfhnmsuKfMHvjsxwPyM+rHhkP+laxIW9n2LN:V45CfhkHTgOP+loIW9na

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Extracted

Family

lumma

C2

https://abruptyopsn.shop/api

https://wholersorie.shop/api

https://framekgirus.shop/api

https://tirepublicerj.shop/api

https://noisycuttej.shop/api

https://rabidcowse.shop/api

https://cloudewahsj.shop/api

Targets

    • Target

      4a74d2cdb08c5ee72c580f980980ab9a49f7c91092e2d28a6567fe74f607f6d0N.exe

    • Size

      300KB

    • MD5

      c239124b99ec303662ab9f6139f45a00

    • SHA1

      25e6aa87abee1666fad2f6fbf872c4c7c0975d5e

    • SHA256

      4a74d2cdb08c5ee72c580f980980ab9a49f7c91092e2d28a6567fe74f607f6d0

    • SHA512

      f4e4cf3f58de88de6f3c9587e360d43654b054e90c016b6a94f0c731d23a81c1075881632c3235e0db9d6ee728444ac6f8d96c0ed16a0bf27c1fd0066501689c

    • SSDEEP

      6144:8F2fA5BsfhnmsuKfMHvjsxwPyM+rHhkP+laxIW9n2LN:V45CfhkHTgOP+loIW9na

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

MITRE ATT&CK Enterprise v15

Tasks