General

  • Target

    5e5232e0ff291e159fb1d42a628d9d03b28e523e11251f99e6b68f45783cc831.zip

  • Size

    501KB

  • Sample

    250107-ac794avkfy

  • MD5

    2955ce155f7877162afc407cd56babbd

  • SHA1

    b413429b069d5d67d8d49bf9c1af285ac711328a

  • SHA256

    5e5232e0ff291e159fb1d42a628d9d03b28e523e11251f99e6b68f45783cc831

  • SHA512

    6bc2df506e0f846be63e317388f2f34e20729280e0d7778324bfbc1f441f03af1d82bc4c19a915e1432e4e602afd82fb99decda0d182ff0ad68f83bf469f53c9

  • SSDEEP

    12288:TztE0u86qlmk/aFA6ln2KKV+FV9cEmRJ3TY1:TO0uYlmsKA6JoM7cF3q

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      5e5232e0ff291e159fb1d42a628d9d03b28e523e11251f99e6b68f45783cc831.zip

    • Size

      501KB

    • MD5

      2955ce155f7877162afc407cd56babbd

    • SHA1

      b413429b069d5d67d8d49bf9c1af285ac711328a

    • SHA256

      5e5232e0ff291e159fb1d42a628d9d03b28e523e11251f99e6b68f45783cc831

    • SHA512

      6bc2df506e0f846be63e317388f2f34e20729280e0d7778324bfbc1f441f03af1d82bc4c19a915e1432e4e602afd82fb99decda0d182ff0ad68f83bf469f53c9

    • SSDEEP

      12288:TztE0u86qlmk/aFA6ln2KKV+FV9cEmRJ3TY1:TO0uYlmsKA6JoM7cF3q

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks