General

  • Target

    0e91eac891958e38f3d996d3c86c1d61df27a887d062140f6fd7913afcb66879.zip

  • Size

    351KB

  • Sample

    250107-ahr53axkan

  • MD5

    6fa136cd6c6783c3ac2c46717d39a199

  • SHA1

    f2fa3c2822f03532136a7c47edf4ff6bb048f353

  • SHA256

    0e91eac891958e38f3d996d3c86c1d61df27a887d062140f6fd7913afcb66879

  • SHA512

    b0e78aa9686c26942e28f8a8a5a9ceacfea1815325c6c17e80e8e2fe26ac9ee9f410a5c0dabf401f9b81e36d88a6a6de51d332eea8f1caefb35d452599a9bc3c

  • SSDEEP

    6144:J90pJN5m3D3RzbyZXflCTnC1aNfPKSSx1L0uSnuwN2C5Hes:vc+DtbItUTSSyguwYW

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      0e91eac891958e38f3d996d3c86c1d61df27a887d062140f6fd7913afcb66879.zip

    • Size

      351KB

    • MD5

      6fa136cd6c6783c3ac2c46717d39a199

    • SHA1

      f2fa3c2822f03532136a7c47edf4ff6bb048f353

    • SHA256

      0e91eac891958e38f3d996d3c86c1d61df27a887d062140f6fd7913afcb66879

    • SHA512

      b0e78aa9686c26942e28f8a8a5a9ceacfea1815325c6c17e80e8e2fe26ac9ee9f410a5c0dabf401f9b81e36d88a6a6de51d332eea8f1caefb35d452599a9bc3c

    • SSDEEP

      6144:J90pJN5m3D3RzbyZXflCTnC1aNfPKSSx1L0uSnuwN2C5Hes:vc+DtbItUTSSyguwYW

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks