General

  • Target

    67fa6040778663050d3382918930b1417cee45cf2265d21b4c6c52b5284ce04a.zip

  • Size

    641KB

  • Sample

    250107-ac7zbsvkey

  • MD5

    ce4f24fae4ae9f133409f7eae612aef2

  • SHA1

    4492df78b03f0ab1ee36707387bf914ce976ed91

  • SHA256

    67fa6040778663050d3382918930b1417cee45cf2265d21b4c6c52b5284ce04a

  • SHA512

    93cabed4f9b0e48b87ed1423cfa724bb80fb8d98afcc941325408dbdeaced50bdb81ff7a4b76de47335d114cbc0e73ce6d37cc21b14571679669b5a5a80e9d3c

  • SSDEEP

    12288:VztE0u86qlmkaAGYJdbSI1ZdoYmsPA4OCJeFyW6BnM:VO0uYlmCfSIYsI4XeFyW6BM

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://fancywaxxers.shop/api

Targets

    • Target

      67fa6040778663050d3382918930b1417cee45cf2265d21b4c6c52b5284ce04a.zip

    • Size

      641KB

    • MD5

      ce4f24fae4ae9f133409f7eae612aef2

    • SHA1

      4492df78b03f0ab1ee36707387bf914ce976ed91

    • SHA256

      67fa6040778663050d3382918930b1417cee45cf2265d21b4c6c52b5284ce04a

    • SHA512

      93cabed4f9b0e48b87ed1423cfa724bb80fb8d98afcc941325408dbdeaced50bdb81ff7a4b76de47335d114cbc0e73ce6d37cc21b14571679669b5a5a80e9d3c

    • SSDEEP

      12288:VztE0u86qlmkaAGYJdbSI1ZdoYmsPA4OCJeFyW6BnM:VO0uYlmCfSIYsI4XeFyW6BM

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks