General

  • Target

    84d4629aca3cb7e0a6962e56ad01b7dc7f62a7bf355f4203c4054de9b1473b1f.zip

  • Size

    359KB

  • Sample

    250107-amzeyavpcw

  • MD5

    2407c4e2014219cd2dd721807895cfb7

  • SHA1

    d0372e6f44c07704ed6f5b1cf0cb53395a90d6a1

  • SHA256

    84d4629aca3cb7e0a6962e56ad01b7dc7f62a7bf355f4203c4054de9b1473b1f

  • SHA512

    afacfb519ce2f09f8c483af0c6f69caba9f5bf350812f1434f26ea67325fd9e312e81cde3f770b3284773ecec080d9420c3c68c4876a25c8dcd3d9e5c491bb67

  • SSDEEP

    6144:296StZOVXBblWPcT9JhkSBc3IrRicmssb2o+x+SARsUUeeWwg:+zge0TzhkKJnmNsx+SgReu

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      84d4629aca3cb7e0a6962e56ad01b7dc7f62a7bf355f4203c4054de9b1473b1f.zip

    • Size

      359KB

    • MD5

      2407c4e2014219cd2dd721807895cfb7

    • SHA1

      d0372e6f44c07704ed6f5b1cf0cb53395a90d6a1

    • SHA256

      84d4629aca3cb7e0a6962e56ad01b7dc7f62a7bf355f4203c4054de9b1473b1f

    • SHA512

      afacfb519ce2f09f8c483af0c6f69caba9f5bf350812f1434f26ea67325fd9e312e81cde3f770b3284773ecec080d9420c3c68c4876a25c8dcd3d9e5c491bb67

    • SSDEEP

      6144:296StZOVXBblWPcT9JhkSBc3IrRicmssb2o+x+SARsUUeeWwg:+zge0TzhkKJnmNsx+SgReu

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks