General

  • Target

    2d5b1940551fc753f0691be8e2c8c2204511188e80f5d002ee4b612b46c36ab6.zip

  • Size

    351KB

  • Sample

    250107-aclq4awpan

  • MD5

    00f1883604104ae78397f4de2ff68533

  • SHA1

    5c2f733afb860ceb3a30e7382c3b3598f22fd456

  • SHA256

    2d5b1940551fc753f0691be8e2c8c2204511188e80f5d002ee4b612b46c36ab6

  • SHA512

    1c1108f514b766cfded31fed4cbd3099ed2ec5e9bc58abf9826329705e3ec825c7fe83b92b1b31912830563d113e2ea818533f13755af537a11dd91a1074e673

  • SSDEEP

    6144:i9NDWuzVf/CEjw0aA87kGJ8xF2E4rY1rww3G5CZ35w2lQOi8GfVK0epptLz:6USVA0mP8OE4r2/GQg2l8VVUp5

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      2d5b1940551fc753f0691be8e2c8c2204511188e80f5d002ee4b612b46c36ab6.zip

    • Size

      351KB

    • MD5

      00f1883604104ae78397f4de2ff68533

    • SHA1

      5c2f733afb860ceb3a30e7382c3b3598f22fd456

    • SHA256

      2d5b1940551fc753f0691be8e2c8c2204511188e80f5d002ee4b612b46c36ab6

    • SHA512

      1c1108f514b766cfded31fed4cbd3099ed2ec5e9bc58abf9826329705e3ec825c7fe83b92b1b31912830563d113e2ea818533f13755af537a11dd91a1074e673

    • SSDEEP

      6144:i9NDWuzVf/CEjw0aA87kGJ8xF2E4rY1rww3G5CZ35w2lQOi8GfVK0epptLz:6USVA0mP8OE4r2/GQg2l8VVUp5

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks