General

  • Target

    c80d0ddd43303921c76ea1d153f8bb08c7c7f23a89b2e86cb38bf5cff18e0472.exe

  • Size

    11.2MB

  • Sample

    250106-dpslystrdt

  • MD5

    9def2ab28d008fdcb73a0aa8e9e9d429

  • SHA1

    b8601f3d030e4c1f22eaeb30ea25648c1786b45e

  • SHA256

    c80d0ddd43303921c76ea1d153f8bb08c7c7f23a89b2e86cb38bf5cff18e0472

  • SHA512

    dee924299bf2056701e706d338438a02155bde43ff9d3bb1b3d3e077465fdb70e5a369656f5ca5555219094df774e335f81e2a068e4daac57688368a5b66bf4d

  • SSDEEP

    98304:yWQRxDODV7fSR5H2te0LkQLbHZYtJpvVGhqNI1xJTImypOzEpwM:RQqBteOutP4H1xJTINpSEpX

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Extracted

Family

lumma

C2

https://abruptyopsn.shop/api

https://wholersorie.shop/api

https://framekgirus.shop/api

https://tirepublicerj.shop/api

https://noisycuttej.shop/api

https://rabidcowse.shop/api

https://cloudewahsj.shop/api

Targets

    • Target

      c80d0ddd43303921c76ea1d153f8bb08c7c7f23a89b2e86cb38bf5cff18e0472.exe

    • Size

      11.2MB

    • MD5

      9def2ab28d008fdcb73a0aa8e9e9d429

    • SHA1

      b8601f3d030e4c1f22eaeb30ea25648c1786b45e

    • SHA256

      c80d0ddd43303921c76ea1d153f8bb08c7c7f23a89b2e86cb38bf5cff18e0472

    • SHA512

      dee924299bf2056701e706d338438a02155bde43ff9d3bb1b3d3e077465fdb70e5a369656f5ca5555219094df774e335f81e2a068e4daac57688368a5b66bf4d

    • SSDEEP

      98304:yWQRxDODV7fSR5H2te0LkQLbHZYtJpvVGhqNI1xJTImypOzEpwM:RQqBteOutP4H1xJTINpSEpX

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks