Overview

overview

10

Static

static

3

9ca4c990e2...3c.exe

windows7-x64

10

9ca4c990e2...3c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9ca4c990e249a3298a469e35c84fb42916b6cd91043af490e11e8e660cf2e63c.zip

  • Size

    352KB

  • Sample

    250107-acdqgswncp

  • MD5

    9d4d398f4c5348733746c28219a87fab

  • SHA1

    cd17b8b30804f3993e92715d48a9a2ae5250fc0d

  • SHA256

    9ca4c990e249a3298a469e35c84fb42916b6cd91043af490e11e8e660cf2e63c

  • SHA512

    32f9ceefa52d7a992ca7b109a4ecb23cbd7bf4df13c45d670a6f2df51b5489d07e18b0e74bd4492ca00cc15532d62c9466e782113c76627aec641f1fdfd31734

  • SSDEEP

    6144:Y9q2nHx9t6ziMrguEHlcENRjYanN02qm8ZS3WD39RTp3nDN2tEEIaGvc:AtHx9kziM9+lcwRkaN08d3WDvTHG7

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      9ca4c990e249a3298a469e35c84fb42916b6cd91043af490e11e8e660cf2e63c.zip

    • Size

      352KB

    • MD5

      9d4d398f4c5348733746c28219a87fab

    • SHA1

      cd17b8b30804f3993e92715d48a9a2ae5250fc0d

    • SHA256

      9ca4c990e249a3298a469e35c84fb42916b6cd91043af490e11e8e660cf2e63c

    • SHA512

      32f9ceefa52d7a992ca7b109a4ecb23cbd7bf4df13c45d670a6f2df51b5489d07e18b0e74bd4492ca00cc15532d62c9466e782113c76627aec641f1fdfd31734

    • SSDEEP

      6144:Y9q2nHx9t6ziMrguEHlcENRjYanN02qm8ZS3WD39RTp3nDN2tEEIaGvc:AtHx9kziM9+lcwRkaN08d3WDvTHG7

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks