General

  • Target

    d7f82fb48a1f96d0ab9a36fb14331ed1a618e980872830a865a08ae3f4a2d51a.zip

  • Size

    651KB

  • Sample

    250107-ack5katrf1

  • MD5

    48df1349522495797220fdbca34d842b

  • SHA1

    c1de44d4930c7585d941ebe1ac753c60a1bb11c2

  • SHA256

    d7f82fb48a1f96d0ab9a36fb14331ed1a618e980872830a865a08ae3f4a2d51a

  • SHA512

    7efa857c1ab4e76de4022a86d412a0555c663c92c98d4f61e70681690436fac03156bc295a855754218bf227c17d33678c795ab99597c6801848082ff957f81c

  • SSDEEP

    12288:ReIdvFSLpJQBr8JJXindgAP1LbyxEac64p9y:RLdAt6DndgAP1sEa2

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://spellshagey.biz/api

Targets

    • Target

      d7f82fb48a1f96d0ab9a36fb14331ed1a618e980872830a865a08ae3f4a2d51a.zip

    • Size

      651KB

    • MD5

      48df1349522495797220fdbca34d842b

    • SHA1

      c1de44d4930c7585d941ebe1ac753c60a1bb11c2

    • SHA256

      d7f82fb48a1f96d0ab9a36fb14331ed1a618e980872830a865a08ae3f4a2d51a

    • SHA512

      7efa857c1ab4e76de4022a86d412a0555c663c92c98d4f61e70681690436fac03156bc295a855754218bf227c17d33678c795ab99597c6801848082ff957f81c

    • SSDEEP

      12288:ReIdvFSLpJQBr8JJXindgAP1LbyxEac64p9y:RLdAt6DndgAP1sEa2

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks