General

  • Target

    3a0f19ba09f4af8c4744eb733f4236803228cc2bf8b96c1a7d5c29851e5ef08d.zip

  • Size

    510KB

  • Sample

    250107-acmcmawpar

  • MD5

    d7c19448212a2d2960fbcec60e668e39

  • SHA1

    7150862dbbfe9f861da1d7871933479ba0d24ceb

  • SHA256

    3a0f19ba09f4af8c4744eb733f4236803228cc2bf8b96c1a7d5c29851e5ef08d

  • SHA512

    58dbf4391abb00c1b5b6c7b61bf678510480ffa595a7ff9c9142d23497acd367a64e2db6647d39276b4d10b0a4f15def3f10019350d997127a6771f0d454e6fb

  • SSDEEP

    6144:ZH0eGrsB+w9Yz8LNbdx3PFX4NNn0cRXFpAolJyY3xAcl+qiFCSzp8ix9tpqlURxY:YoDAYBTQB5zr1KcpiFCAp1clURx3xG3

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://fancywaxxers.shop/api

Targets

    • Target

      3a0f19ba09f4af8c4744eb733f4236803228cc2bf8b96c1a7d5c29851e5ef08d.zip

    • Size

      510KB

    • MD5

      d7c19448212a2d2960fbcec60e668e39

    • SHA1

      7150862dbbfe9f861da1d7871933479ba0d24ceb

    • SHA256

      3a0f19ba09f4af8c4744eb733f4236803228cc2bf8b96c1a7d5c29851e5ef08d

    • SHA512

      58dbf4391abb00c1b5b6c7b61bf678510480ffa595a7ff9c9142d23497acd367a64e2db6647d39276b4d10b0a4f15def3f10019350d997127a6771f0d454e6fb

    • SSDEEP

      6144:ZH0eGrsB+w9Yz8LNbdx3PFX4NNn0cRXFpAolJyY3xAcl+qiFCSzp8ix9tpqlURxY:YoDAYBTQB5zr1KcpiFCAp1clURx3xG3

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks