General

  • Target

    Xmas-es_upd_3.5.zip

  • Size

    32.4MB

  • Sample

    250106-za62pawrhy

  • MD5

    01b63b08e6363ee685f71ee0de1fd62b

  • SHA1

    5dc6898f14e1471aa33329b11e09d6c36e5d69ae

  • SHA256

    ca2f19552fdd0dc65dd599210e2c65bb9a6965fe1e8e651a2560046092e350b0

  • SHA512

    53d38b011b544000b4cc2b097fa58c3f4fd0b5d23b222ead69fbdee050f8ece4f0866aa6291936402ef6e62b789b60d775a4d8ed70556bab78011a4d2bb57482

  • SSDEEP

    786432:AZaoGHxybnNKq4N6ecTxXUpp8HD4eQE3+De1ShmGJeOLTLVoXm:AQoGRybnsLQhCp8HUOAXhhTLKm

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      BlendySeptu.exe

    • Size

      3.7MB

    • MD5

      804d91f440a2b98edef49cf89285a7d7

    • SHA1

      89ecc4b1a80deaba3985efce835e2b57c8091699

    • SHA256

      ecd6180023a21aa51893b8eab7781b6d07f96396cb551bae0089c82269988f9d

    • SHA512

      2cc0c61af4fb4921922f7ddb32bfe953dcb175fe4c81b1ee25aa311c7222c6e3e7bf464b765fcaab4675388388e4c22fa62b6d0fec10612cc4ac38ebe23a5b20

    • SSDEEP

      49152:qzbrRE6sbEONPuYiF+OEPaiW8eHtlP5dH:qzbrRvmu

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

MITRE ATT&CK Enterprise v15

Tasks