General

  • Target

    Release-x64.zip

  • Size

    19.6MB

  • Sample

    250105-ae5a8atrgt

  • MD5

    25493ab271580066a0d5e8d43b25e055

  • SHA1

    f2a8336d1e6a75233f796fe37ec00aa204fb6907

  • SHA256

    5281883011b847e4ab3f68c7488a47fb8489ac802c558a2cb1e5bef588f06269

  • SHA512

    41728fc89da12faca4fa738f5ef48cd1d7fd1c9b82151f9d011f4079611d0e7fdc7a06503a07a469a89b9de0424404b547bd89e5678da73a8dfa89668932deb1

  • SSDEEP

    393216:oyzn8HaG+RVYNVwS8+1Kd7qI2R/Ri977qCWEyeEcTeuoIJKxoJe4B2:Zn8yV2Vw7+10qbKzEcquoAKxogM2

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      Release-x64.zip

    • Size

      19.6MB

    • MD5

      25493ab271580066a0d5e8d43b25e055

    • SHA1

      f2a8336d1e6a75233f796fe37ec00aa204fb6907

    • SHA256

      5281883011b847e4ab3f68c7488a47fb8489ac802c558a2cb1e5bef588f06269

    • SHA512

      41728fc89da12faca4fa738f5ef48cd1d7fd1c9b82151f9d011f4079611d0e7fdc7a06503a07a469a89b9de0424404b547bd89e5678da73a8dfa89668932deb1

    • SSDEEP

      393216:oyzn8HaG+RVYNVwS8+1Kd7qI2R/Ri977qCWEyeEcTeuoIJKxoJe4B2:Zn8yV2Vw7+10qbKzEcquoAKxogM2

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks