Overview

overview

10

Static

static

1

2c5ccd8be1...8f.exe

windows7-x64

10

2c5ccd8be1...8f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2c5ccd8be1d027816b3ba41feb2191aa5898d984b07e0b5c1f4b499969b1a38f.zip

  • Size

    374KB

  • Sample

    250107-acemsawndq

  • MD5

    c4329ad162b384ec88d9066cb4e61a24

  • SHA1

    65695f588af125c2aec5206d4bd0137298e2f314

  • SHA256

    2c5ccd8be1d027816b3ba41feb2191aa5898d984b07e0b5c1f4b499969b1a38f

  • SHA512

    4ba15aa8c62d5837a27cd4f21fba2812449f453304a5f51c33961b50e6ad568b853905e6982a6b50bc06404d9558002071335ad0748206e2954b66bfe7731c80

  • SSDEEP

    6144:p2pwktDrDuMtVXo6MFbdQChRNraGhIlWW1n88gupG3XZ6AZP5dw7rGViJdh4lQ9x:d4CmYP1SC7Np61uXHzPPVU9FmJ1bXEEO

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://fancywaxxers.shop/api

Targets

    • Target

      2c5ccd8be1d027816b3ba41feb2191aa5898d984b07e0b5c1f4b499969b1a38f.zip

    • Size

      374KB

    • MD5

      c4329ad162b384ec88d9066cb4e61a24

    • SHA1

      65695f588af125c2aec5206d4bd0137298e2f314

    • SHA256

      2c5ccd8be1d027816b3ba41feb2191aa5898d984b07e0b5c1f4b499969b1a38f

    • SHA512

      4ba15aa8c62d5837a27cd4f21fba2812449f453304a5f51c33961b50e6ad568b853905e6982a6b50bc06404d9558002071335ad0748206e2954b66bfe7731c80

    • SSDEEP

      6144:p2pwktDrDuMtVXo6MFbdQChRNraGhIlWW1n88gupG3XZ6AZP5dw7rGViJdh4lQ9x:d4CmYP1SC7Np61uXHzPPVU9FmJ1bXEEO

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks