General

  • Target

    0d6a4817ec77e5c5ad170b169b3b0dc9e781d19d647237d83f068742fd8572adN.exe

  • Size

    345KB

  • Sample

    250107-adqrfawrfl

  • MD5

    ddd1d5ef1d3783ff8373079a5d2f2f20

  • SHA1

    6f3b2d7e6e782c5656b341927037e354643ebb47

  • SHA256

    0d6a4817ec77e5c5ad170b169b3b0dc9e781d19d647237d83f068742fd8572ad

  • SHA512

    25515e2a5dbe9fdcf49491b4f822b38f8721d1ada3d7696e51201178c171b45f7667d258406aca26df1a086ea24c20afdce7e66546951be3638eff78fdf74888

  • SSDEEP

    6144:0TVsgo5qJgKjOfDDBrwHJAtlsGMpZh7exUG0Gv0JYlCaLSmJ3/n2b:6Vi8go6BrwSMpZg+GBv0JYlCaXJ34

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://fancywaxxers.shop/api

Targets

    • Target

      0d6a4817ec77e5c5ad170b169b3b0dc9e781d19d647237d83f068742fd8572adN.exe

    • Size

      345KB

    • MD5

      ddd1d5ef1d3783ff8373079a5d2f2f20

    • SHA1

      6f3b2d7e6e782c5656b341927037e354643ebb47

    • SHA256

      0d6a4817ec77e5c5ad170b169b3b0dc9e781d19d647237d83f068742fd8572ad

    • SHA512

      25515e2a5dbe9fdcf49491b4f822b38f8721d1ada3d7696e51201178c171b45f7667d258406aca26df1a086ea24c20afdce7e66546951be3638eff78fdf74888

    • SSDEEP

      6144:0TVsgo5qJgKjOfDDBrwHJAtlsGMpZh7exUG0Gv0JYlCaLSmJ3/n2b:6Vi8go6BrwSMpZg+GBv0JYlCaXJ34

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks