Overview

overview

10

Static

static

3

c40e2e9f73...c8.exe

windows7-x64

10

c40e2e9f73...c8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c40e2e9f7394619cdfa38460ba62a5a9880b20e2da053482d836e9d3b1de51c8.zip

  • Size

    358KB

  • Sample

    250107-acc4yswncj

  • MD5

    d09a1bf3248535d6a6b42f952cb45b36

  • SHA1

    1a889aa27a036b808fe51b1268c4aa85a7d9ddef

  • SHA256

    c40e2e9f7394619cdfa38460ba62a5a9880b20e2da053482d836e9d3b1de51c8

  • SHA512

    037eb6adeb759fa087f0be32a4a472724be398cdb5b19e8339d07e318ed9efc9809c0220f6743ae8167147e132cc2a20b54cb6dd9bc0c2d5bede08a908475c2f

  • SSDEEP

    6144:v9XhFJ2ZJUzLhX+oRdfvl/HxkU++Ql36XMMs7cVRK85xm9tGRDytvl6D5wOAVY:1rJsJUzLhJ3l/RkU+b3lAVDgTGROtt6p

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://fancywaxxers.shop/api

Targets

    • Target

      c40e2e9f7394619cdfa38460ba62a5a9880b20e2da053482d836e9d3b1de51c8.zip

    • Size

      358KB

    • MD5

      d09a1bf3248535d6a6b42f952cb45b36

    • SHA1

      1a889aa27a036b808fe51b1268c4aa85a7d9ddef

    • SHA256

      c40e2e9f7394619cdfa38460ba62a5a9880b20e2da053482d836e9d3b1de51c8

    • SHA512

      037eb6adeb759fa087f0be32a4a472724be398cdb5b19e8339d07e318ed9efc9809c0220f6743ae8167147e132cc2a20b54cb6dd9bc0c2d5bede08a908475c2f

    • SSDEEP

      6144:v9XhFJ2ZJUzLhX+oRdfvl/HxkU++Ql36XMMs7cVRK85xm9tGRDytvl6D5wOAVY:1rJsJUzLhJ3l/RkU+b3lAVDgTGROtt6p

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks