General

  • Target

    8f3b34b315bd476cebf5e2206dc8c86969ff4d1024254dda10380c59053c25a4.zip

  • Size

    361KB

  • Sample

    250107-acazlatqgt

  • MD5

    18b04105c3642271c251881ad8ae7e82

  • SHA1

    4c1e71acc06f7e3c19c82fd2b3cdd77c0423ed6b

  • SHA256

    8f3b34b315bd476cebf5e2206dc8c86969ff4d1024254dda10380c59053c25a4

  • SHA512

    57ed699ccd27281148c9d60d4b6c6dca71f5b3d5275b8b4c3f00b38efd77d0e0b5e558b3ccb68225a279093cd7686a5f25592eb59f0ee9dab706148776761a99

  • SSDEEP

    6144:7YT9J0Hfev0iPtGdYClOsPTnKBwNIm7yCegxhuDNzrrbOq5HcKqQwbeGFuO:qAmvfPtGdflnTSRJ8iDd/opP6Y

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://fancywaxxers.shop/api

Targets

    • Target

      8f3b34b315bd476cebf5e2206dc8c86969ff4d1024254dda10380c59053c25a4.zip

    • Size

      361KB

    • MD5

      18b04105c3642271c251881ad8ae7e82

    • SHA1

      4c1e71acc06f7e3c19c82fd2b3cdd77c0423ed6b

    • SHA256

      8f3b34b315bd476cebf5e2206dc8c86969ff4d1024254dda10380c59053c25a4

    • SHA512

      57ed699ccd27281148c9d60d4b6c6dca71f5b3d5275b8b4c3f00b38efd77d0e0b5e558b3ccb68225a279093cd7686a5f25592eb59f0ee9dab706148776761a99

    • SSDEEP

      6144:7YT9J0Hfev0iPtGdYClOsPTnKBwNIm7yCegxhuDNzrrbOq5HcKqQwbeGFuO:qAmvfPtGdflnTSRJ8iDd/opP6Y

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks