General

  • Target

    83473fedc38a59a318ec01e55ecd1187c4f8079f95583053504fc515b3cba049.zip

  • Size

    515KB

  • Sample

    250107-aclfbswpal

  • MD5

    224a131cf09c59a013129810d2884692

  • SHA1

    8cd2d4ce00d3bbcca230b0b03e84a80997a13dfc

  • SHA256

    83473fedc38a59a318ec01e55ecd1187c4f8079f95583053504fc515b3cba049

  • SHA512

    4f134c0aa4dde36a53c2b36c22465bed507bfea4d84a3bf65bfd31a9208280911cbe1e4f82a850a701c693915162568b62e91154a77c9df2ecd994568d675eae

  • SSDEEP

    12288:fztE0u86qlmk/iYP1SC7Np61uXHzPPVU9FmJ1hXL:fO0uYlmsiUXNp61uXHLO90hXL

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://fancywaxxers.shop/api

Targets

    • Target

      83473fedc38a59a318ec01e55ecd1187c4f8079f95583053504fc515b3cba049.zip

    • Size

      515KB

    • MD5

      224a131cf09c59a013129810d2884692

    • SHA1

      8cd2d4ce00d3bbcca230b0b03e84a80997a13dfc

    • SHA256

      83473fedc38a59a318ec01e55ecd1187c4f8079f95583053504fc515b3cba049

    • SHA512

      4f134c0aa4dde36a53c2b36c22465bed507bfea4d84a3bf65bfd31a9208280911cbe1e4f82a850a701c693915162568b62e91154a77c9df2ecd994568d675eae

    • SSDEEP

      12288:fztE0u86qlmk/iYP1SC7Np61uXHzPPVU9FmJ1hXL:fO0uYlmsiUXNp61uXHLO90hXL

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks