Resubmissions

08/01/2025, 01:16

250108-bm46vszkaj10

07/01/2025, 22:37

250107-2jz1vatpdr10

07/01/2025, 22:11

250107-14bnbasrfr10

06/01/2025, 21:24

250106-z9bd3ayjes10

06/01/2025, 04:52

250106-fhgxzsyphk10

06/01/2025, 04:46

250106-fdzl8sypaj10

06/01/2025, 04:34

250106-e679eaymcj10

06/01/2025, 04:26

250106-e2kybawlex10

06/01/2025, 03:47

250106-ecn9favpcw10

06/01/2025, 03:19

250106-dvk43avkaw10

General

  • Target
    setup.exe
  • Size 793KB
  • Sample250106-e679eaymcj
  • SHA256 1f8c9a3874f67a64d9ffff9f73d608d62dbd93a443404d969455e03b62e5fd48
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • lumma

C2
  • https://cloudewahsj.shop/api

  • https://rabidcowse.shop/api

  • https://noisycuttej.shop/api

  • https://tirepublicerj.shop/api

  • https://framekgirus.shop/api

  • https://wholersorie.shop/api

  • https://abruptyopsn.shop/api

  • https://nearycrepso.shop/api

Targets

    • Target
      setup.exe
    • Size 793KB
    • SHA256 1f8c9a3874f67a64d9ffff9f73d608d62dbd93a443404d969455e03b62e5fd48
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks