General

  • Target

    6bd64686a4f9bf26b7704dd083fc74777723b6d41b8fb799f10f1f8fcb7d6922.zip

  • Size

    70.7MB

  • Sample

    250107-ahqx1axkaj

  • MD5

    8732de8e6f2c0add0417891313bed2ee

  • SHA1

    3298ad2d0cec5ba098fc3e49470f937fc8e046ce

  • SHA256

    6bd64686a4f9bf26b7704dd083fc74777723b6d41b8fb799f10f1f8fcb7d6922

  • SHA512

    bd0c8b5f0206d3c47e203180b74312bb12cdcbc1d9aadf2028398746a37a562a2e90967b4db21ce16c044c872902de50ba9bef6d596f8adb8d78c2222ab7f379

  • SSDEEP

    12288:YwfMt3eNjtBCIfLt/W+eNZ0fw8BEQ9RKJQ1okVQ06SJDISxPjSWppi33f0uNNDH:Y8Mt3+jvCIZgYw8BEQ9MW1

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      6bd64686a4f9bf26b7704dd083fc74777723b6d41b8fb799f10f1f8fcb7d6922.zip

    • Size

      70.7MB

    • MD5

      8732de8e6f2c0add0417891313bed2ee

    • SHA1

      3298ad2d0cec5ba098fc3e49470f937fc8e046ce

    • SHA256

      6bd64686a4f9bf26b7704dd083fc74777723b6d41b8fb799f10f1f8fcb7d6922

    • SHA512

      bd0c8b5f0206d3c47e203180b74312bb12cdcbc1d9aadf2028398746a37a562a2e90967b4db21ce16c044c872902de50ba9bef6d596f8adb8d78c2222ab7f379

    • SSDEEP

      12288:YwfMt3eNjtBCIfLt/W+eNZ0fw8BEQ9RKJQ1okVQ06SJDISxPjSWppi33f0uNNDH:Y8Mt3+jvCIZgYw8BEQ9MW1

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Target

      $PLUGINSDIR/StdUtils.dll

    • Size

      100KB

    • MD5

      c6a6e03f77c313b267498515488c5740

    • SHA1

      3d49fc2784b9450962ed6b82b46e9c3c957d7c15

    • SHA256

      b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

    • SHA512

      9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

    • SSDEEP

      3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v

    Score
    3/10
    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      0d7ad4f45dc6f5aa87f606d0331c6901

    • SHA1

      48df0911f0484cbe2a8cdd5362140b63c41ee457

    • SHA256

      3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

    • SHA512

      c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

    • SSDEEP

      192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6

    Score
    3/10
    • Target

      $PLUGINSDIR/WinShell.dll

    • Size

      3KB

    • MD5

      1cc7c37b7e0c8cd8bf04b6cc283e1e56

    • SHA1

      0b9519763be6625bd5abce175dcc59c96d100d4c

    • SHA256

      9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

    • SHA512

      7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

    Score
    3/10
    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      ec0504e6b8a11d5aad43b296beeb84b2

    • SHA1

      91b5ce085130c8c7194d66b2439ec9e1c206497c

    • SHA256

      5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

    • SHA512

      3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

    • SSDEEP

      96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks