General

  • Target

    TieLoader.exe

  • Size

    114.8MB

  • Sample

    250105-xrcs3asrbw

  • MD5

    e1fb2cb934345dfa6d0dce861c053207

  • SHA1

    57ef6ab108587fead8c30b35f1e0555398b581a3

  • SHA256

    47f60f31820d9738c430b49303748283f5f04811d1edefdcbec7d09c54c0beaf

  • SHA512

    c42728bdc36e5e11df04ab7979e431718747ac32856e161b653e3839ad3a704c450ea1a33419cae20b5c67f282472605e587c0e28c9579d8fce02be264226905

  • SSDEEP

    98304:CZTRnbToObE2UQMOSzqSDqesyZS+h+NOs4tYaTmTvTrBXR+2:CZ1vo8E2YBwXNOHnaTbrBZ

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Extracted

Family

lumma

C2

https://abruptyopsn.shop/api

https://wholersorie.shop/api

https://framekgirus.shop/api

https://tirepublicerj.shop/api

https://noisycuttej.shop/api

https://rabidcowse.shop/api

https://cloudewahsj.shop/api

Targets

    • Target

      TieLoader.exe

    • Size

      114.8MB

    • MD5

      e1fb2cb934345dfa6d0dce861c053207

    • SHA1

      57ef6ab108587fead8c30b35f1e0555398b581a3

    • SHA256

      47f60f31820d9738c430b49303748283f5f04811d1edefdcbec7d09c54c0beaf

    • SHA512

      c42728bdc36e5e11df04ab7979e431718747ac32856e161b653e3839ad3a704c450ea1a33419cae20b5c67f282472605e587c0e28c9579d8fce02be264226905

    • SSDEEP

      98304:CZTRnbToObE2UQMOSzqSDqesyZS+h+NOs4tYaTmTvTrBXR+2:CZ1vo8E2YBwXNOHnaTbrBZ

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks