Overview

overview

10

Static

static

3

2f1a930aa5...fd.exe

windows7-x64

1

2f1a930aa5...fd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    250106-2nk3gs1nax_pw_infected.zip

  • Size

    4.4MB

  • Sample

    250106-3crlkavkhl

  • MD5

    7c58c5db66faf50fb81d213548fb187e

  • SHA1

    bd642ea43c4fe6c13552f02e95cddd43a990540b

  • SHA256

    3680d00f4090f837bb4ab3241c57bdcb2a5faf3ec5d39d1643b2af5be00435ff

  • SHA512

    7e1a6cd3f285867eb8aa5eede7609476eb88f5b2d0be03ad6fea1f06aa59d13d214b223b9e2b062fa8a0881043ed4e258af4dc52d58d7ad39e59cf7a3836d26a

  • SSDEEP

    98304:sAOR0jPr4PBoul3Qhc7Gau3x0nNyK7rTue0nIEPXqWP:+RiP5GQbaqx0nM1erEPay

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://weiggheticulop.shop/api

https://consciousourwi.shop/api

https://southedhiscuso.shop/api

https://deicedosmzj.shop/api

https://cagedwifedsozm.shop/api

https://charecteristicdxp.shop/api

https://interactiedovspm.shop/api

https://potentioallykeos.shop/api

https://parallellywko.shop/api

Targets

    • Target

      2f1a930aa5ce429a2d891adf0934b969b239f1261b9f5822f3d6c1b3502248fd.zip

    • Size

      14.5MB

    • MD5

      05b576691acf4160e39404e3044c30f3

    • SHA1

      a27657cbdbc563c070f7888e18fe0f8909f69eee

    • SHA256

      2f1a930aa5ce429a2d891adf0934b969b239f1261b9f5822f3d6c1b3502248fd

    • SHA512

      ea17944dd1f3915cd8ca6a6144874fbd79430b590752bc7d262f745914da148d9153af8b0fc7b3d7c9a1152406155a1631438ea151e3ed98efb514395f42f3a3

    • SSDEEP

      98304:5XgQiZESXRsk6hixEEYCOKvGR2bAr154R/7qE4vPJfzoqdqxoq:516BohiWTCOcW2bAyR/734vPxzo

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks