Overview

overview

10

Static

static

3

32c99f0893...c2.exe

windows7-x64

10

32c99f0893...c2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    32c99f08930116583e2a4a9a6aebb8e7cf70b3d494c6f25832f33a7b4c637ac2.zip

  • Size

    516KB

  • Sample

    250107-acb7nawnbk

  • MD5

    ae8ad215639e1e0edcca21821926e4b4

  • SHA1

    7ffe646b1f73b9b666ef30f9f101ce7436d3c174

  • SHA256

    32c99f08930116583e2a4a9a6aebb8e7cf70b3d494c6f25832f33a7b4c637ac2

  • SHA512

    f6b03d5a2d95382e55cedd6d409a7a237fbb1d2f319424b5f5813b0f5263e488b5a34af08479e1153426610fcc9300ab519040e3ac920045cea28950486d313b

  • SSDEEP

    12288:zztE0u86qlmk/SlTJ8UZvhPSG6zhyFDpH7k32iAO+:zO0uYlmswGbNgdHUp+

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      32c99f08930116583e2a4a9a6aebb8e7cf70b3d494c6f25832f33a7b4c637ac2.zip

    • Size

      516KB

    • MD5

      ae8ad215639e1e0edcca21821926e4b4

    • SHA1

      7ffe646b1f73b9b666ef30f9f101ce7436d3c174

    • SHA256

      32c99f08930116583e2a4a9a6aebb8e7cf70b3d494c6f25832f33a7b4c637ac2

    • SHA512

      f6b03d5a2d95382e55cedd6d409a7a237fbb1d2f319424b5f5813b0f5263e488b5a34af08479e1153426610fcc9300ab519040e3ac920045cea28950486d313b

    • SSDEEP

      12288:zztE0u86qlmk/SlTJ8UZvhPSG6zhyFDpH7k32iAO+:zO0uYlmswGbNgdHUp+

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks