Overview

overview

10

Static

static

3

75dff09326...b9.exe

windows7-x64

10

75dff09326...b9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    75dff09326c4cc734691ce1e956b4597d82d95e9677ac6e72b0e60339af631b9.zip

  • Size

    355KB

  • Sample

    250107-acgr5strcy

  • MD5

    e7a2cf05e0397ccc2fae3fb3b44700bb

  • SHA1

    3d849c354c686c6a8ea0dd210cf3eac7df237f64

  • SHA256

    75dff09326c4cc734691ce1e956b4597d82d95e9677ac6e72b0e60339af631b9

  • SHA512

    15e05afe0d544bbe48174e3cb23a18590e6db7e123e95c898e49b9acdcba8ea97b95560e5070e5b6808677c7d9ae2e4fc28e87338634ce8222e8ff442f879413

  • SSDEEP

    6144:h9n8U3K2IZPAl0iM1OmQG2IAamRKsOWcqO8SVM6+dJyri5HqyE9BLoim7NDR:38UrIZYl3YOjyAY/WhEadJmi7PhR

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      75dff09326c4cc734691ce1e956b4597d82d95e9677ac6e72b0e60339af631b9.zip

    • Size

      355KB

    • MD5

      e7a2cf05e0397ccc2fae3fb3b44700bb

    • SHA1

      3d849c354c686c6a8ea0dd210cf3eac7df237f64

    • SHA256

      75dff09326c4cc734691ce1e956b4597d82d95e9677ac6e72b0e60339af631b9

    • SHA512

      15e05afe0d544bbe48174e3cb23a18590e6db7e123e95c898e49b9acdcba8ea97b95560e5070e5b6808677c7d9ae2e4fc28e87338634ce8222e8ff442f879413

    • SSDEEP

      6144:h9n8U3K2IZPAl0iM1OmQG2IAamRKsOWcqO8SVM6+dJyri5HqyE9BLoim7NDR:38UrIZYl3YOjyAY/WhEadJmi7PhR

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks