lumma | 3a0f19ba09f4af8c4744eb733f4236803228cc2bf8b96c1a7d5c29851e5ef08d

General

Target

3a0f19ba09f4af8c4744eb733f4236803228cc2bf8b96c1a7d5c29851e5ef08d.zip
Size

510KB
Sample

250107-acmcmawpar
MD5

d7c19448212a2d2960fbcec60e668e39
SHA1

7150862dbbfe9f861da1d7871933479ba0d24ceb
SHA256

3a0f19ba09f4af8c4744eb733f4236803228cc2bf8b96c1a7d5c29851e5ef08d
SHA512

58dbf4391abb00c1b5b6c7b61bf678510480ffa595a7ff9c9142d23497acd367a64e2db6647d39276b4d10b0a4f15def3f10019350d997127a6771f0d454e6fb
SSDEEP

6144:ZH0eGrsB+w9Yz8LNbdx3PFX4NNn0cRXFpAolJyY3xAcl+qiFCSzp8ix9tpqlURxY:YoDAYBTQB5zr1KcpiFCAp1clURx3xG3

Score

10^/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://fancywaxxers.shop/api

Targets

- Target
  
  3a0f19ba09f4af8c4744eb733f4236803228cc2bf8b96c1a7d5c29851e5ef08d.zip
- Size
  
  510KB
- MD5
  
  d7c19448212a2d2960fbcec60e668e39
- SHA1
  
  7150862dbbfe9f861da1d7871933479ba0d24ceb
- SHA256
  
  3a0f19ba09f4af8c4744eb733f4236803228cc2bf8b96c1a7d5c29851e5ef08d
- SHA512
  
  58dbf4391abb00c1b5b6c7b61bf678510480ffa595a7ff9c9142d23497acd367a64e2db6647d39276b4d10b0a4f15def3f10019350d997127a6771f0d454e6fb
- SSDEEP
  
  6144:ZH0eGrsB+w9Yz8LNbdx3PFX4NNn0cRXFpAolJyY3xAcl+qiFCSzp8ix9tpqlURxY:YoDAYBTQB5zr1KcpiFCAp1clURx3xG3
Score

10^/10

lumma discovery stealer
- Lumma Stealer, LummaC
  Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
  stealer lumma
- Lumma family
  lumma
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Lumma Stealer, LummaC

Lumma family

Loads dropped DLL

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

We care about your privacy.