General

  • Target

    3661214956d8f2f3127d60705e99267a58097e492c5bd232ebb2f2c581af6561.zip

  • Size

    358KB

  • Sample

    250107-ahr53axkam

  • MD5

    526846a2f16a37c89d5338147be48a41

  • SHA1

    d81e06954e581c5f1b5db265e4dba187cfa4252e

  • SHA256

    3661214956d8f2f3127d60705e99267a58097e492c5bd232ebb2f2c581af6561

  • SHA512

    039b272a2311da150491b76c1fdb44c1d50ed80aa9d66911f3ff580fe5a6012de7ecc64a958b1800f95671eb31ed72dd23ac567bb140806c5313dcab5901ea68

  • SSDEEP

    6144:F9D1CnsabI94BOBHUDjMuiwmOjDqAnJZ95uZpcCpM3S6K5nOwdBUFPk:bonXbI94BOdUDjMun2S5uZpc++/uBGk

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      3661214956d8f2f3127d60705e99267a58097e492c5bd232ebb2f2c581af6561.zip

    • Size

      358KB

    • MD5

      526846a2f16a37c89d5338147be48a41

    • SHA1

      d81e06954e581c5f1b5db265e4dba187cfa4252e

    • SHA256

      3661214956d8f2f3127d60705e99267a58097e492c5bd232ebb2f2c581af6561

    • SHA512

      039b272a2311da150491b76c1fdb44c1d50ed80aa9d66911f3ff580fe5a6012de7ecc64a958b1800f95671eb31ed72dd23ac567bb140806c5313dcab5901ea68

    • SSDEEP

      6144:F9D1CnsabI94BOBHUDjMuiwmOjDqAnJZ95uZpcCpM3S6K5nOwdBUFPk:bonXbI94BOdUDjMun2S5uZpc++/uBGk

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks