General

  • Target

    b0324385e9deaef97db539829fcd4e9f1a8d60d5265f00ec2af834f93a0ab88b.zip

  • Size

    70.7MB

  • Sample

    250107-accs7awnbn

  • MD5

    fa6588658e6cf5386a4b6e8f4ea2e476

  • SHA1

    da49c1eb034e85f5ff5c8861207a84ff59462bd1

  • SHA256

    b0324385e9deaef97db539829fcd4e9f1a8d60d5265f00ec2af834f93a0ab88b

  • SHA512

    d4c1257f4144ee7e950630c124d60fcba48eb4783b11368a556e27fb79b1be2b43203e0c611b5e4f29b470aed09e3758fc21d46fd37475768d98203a548988cf

  • SSDEEP

    12288:wO0UhxAuwuG0cvrwq02H61XWokM1MNu309RKJQ1tgDyCmjugCLPH0aGMBEid53FR:wODhS0c9fHCf309MW1o

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      b0324385e9deaef97db539829fcd4e9f1a8d60d5265f00ec2af834f93a0ab88b.zip

    • Size

      70.7MB

    • MD5

      fa6588658e6cf5386a4b6e8f4ea2e476

    • SHA1

      da49c1eb034e85f5ff5c8861207a84ff59462bd1

    • SHA256

      b0324385e9deaef97db539829fcd4e9f1a8d60d5265f00ec2af834f93a0ab88b

    • SHA512

      d4c1257f4144ee7e950630c124d60fcba48eb4783b11368a556e27fb79b1be2b43203e0c611b5e4f29b470aed09e3758fc21d46fd37475768d98203a548988cf

    • SSDEEP

      12288:wO0UhxAuwuG0cvrwq02H61XWokM1MNu309RKJQ1tgDyCmjugCLPH0aGMBEid53FR:wODhS0c9fHCf309MW1o

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Target

      $PLUGINSDIR/StdUtils.dll

    • Size

      100KB

    • MD5

      c6a6e03f77c313b267498515488c5740

    • SHA1

      3d49fc2784b9450962ed6b82b46e9c3c957d7c15

    • SHA256

      b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

    • SHA512

      9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

    • SSDEEP

      3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v

    Score
    3/10
    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      0d7ad4f45dc6f5aa87f606d0331c6901

    • SHA1

      48df0911f0484cbe2a8cdd5362140b63c41ee457

    • SHA256

      3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

    • SHA512

      c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

    • SSDEEP

      192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6

    Score
    3/10
    • Target

      $PLUGINSDIR/WinShell.dll

    • Size

      3KB

    • MD5

      1cc7c37b7e0c8cd8bf04b6cc283e1e56

    • SHA1

      0b9519763be6625bd5abce175dcc59c96d100d4c

    • SHA256

      9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

    • SHA512

      7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

    Score
    3/10
    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      ec0504e6b8a11d5aad43b296beeb84b2

    • SHA1

      91b5ce085130c8c7194d66b2439ec9e1c206497c

    • SHA256

      5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

    • SHA512

      3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

    • SSDEEP

      96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks