General

  • Target

    b50c9429015516339ca1948d490540a71053c6de085c12fbfd72dc8bde711525

  • Size

    3.0MB

  • Sample

    250106-clr1ksvnar

  • MD5

    e25bdfa11c0733357c93685e6a227542

  • SHA1

    bb9563d4aa82fc6ae7019940e4dce4395ad25e9c

  • SHA256

    b50c9429015516339ca1948d490540a71053c6de085c12fbfd72dc8bde711525

  • SHA512

    368fb2850a777c0e1ae01775adf34e5a7bdc5eb92293922f83f429738f08b702e2436f71f79622c9c0fda23fbaaf5ef6d029aad2ba34fc66ed517a2eab2a8e29

  • SSDEEP

    49152:8fU4UjMUHeSzwfwNZsmsccPSISMJjOifmYt/oslz3XMKbhcJIVvIaHS6yH1:8fUbVeS4wb4cD3MJjEYxomTbbFpRHE1

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://impend-differ.biz/api

https://print-vexer.biz/api

https://dare-curbys.biz/api

https://covery-mover.biz/api

https://formy-spill.biz/api

https://dwell-exclaim.biz/api

https://zinc-sneark.biz/api

https://se-blurry.biz/api

https://stir-zing.cyou/api

Targets

    • Target

      b50c9429015516339ca1948d490540a71053c6de085c12fbfd72dc8bde711525

    • Size

      3.0MB

    • MD5

      e25bdfa11c0733357c93685e6a227542

    • SHA1

      bb9563d4aa82fc6ae7019940e4dce4395ad25e9c

    • SHA256

      b50c9429015516339ca1948d490540a71053c6de085c12fbfd72dc8bde711525

    • SHA512

      368fb2850a777c0e1ae01775adf34e5a7bdc5eb92293922f83f429738f08b702e2436f71f79622c9c0fda23fbaaf5ef6d029aad2ba34fc66ed517a2eab2a8e29

    • SSDEEP

      49152:8fU4UjMUHeSzwfwNZsmsccPSISMJjOifmYt/oslz3XMKbhcJIVvIaHS6yH1:8fUbVeS4wb4cD3MJjEYxomTbbFpRHE1

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks