General

  • Target

    9def2ab28d008fdcb73a0aa8e9e9d429.bin

  • Size

    4.4MB

  • Sample

    250107-b2wg9sxqa1

  • MD5

    ee5347540a79ab2d8e4c6c59fdad81b5

  • SHA1

    0ac43413020a4f0afd8417cbb254f266f3e49c1b

  • SHA256

    63b66e2aaa8a08ff6ab2a440e5676686a06cbbf88f904001e6c9fb88bb5d5ae8

  • SHA512

    6ecae0c225cc0ae26a1ae6bf542f2c0984c71fccf1ba31ee0c09cab90a0f04a6a925e699a1c73c973230ddbcbc33c4e0a8005891017d5553e0b7dc08e7a77db4

  • SSDEEP

    98304:ZgMYg6tzIR5mFBjYpvOowncerCjwP9KxTSPB068ZErG/shDGbr:ZSJtzSEQpzwncqCjoBr8ZcvhDGbr

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      c80d0ddd43303921c76ea1d153f8bb08c7c7f23a89b2e86cb38bf5cff18e0472.exe

    • Size

      11.2MB

    • MD5

      9def2ab28d008fdcb73a0aa8e9e9d429

    • SHA1

      b8601f3d030e4c1f22eaeb30ea25648c1786b45e

    • SHA256

      c80d0ddd43303921c76ea1d153f8bb08c7c7f23a89b2e86cb38bf5cff18e0472

    • SHA512

      dee924299bf2056701e706d338438a02155bde43ff9d3bb1b3d3e077465fdb70e5a369656f5ca5555219094df774e335f81e2a068e4daac57688368a5b66bf4d

    • SSDEEP

      98304:yWQRxDODV7fSR5H2te0LkQLbHZYtJpvVGhqNI1xJTImypOzEpwM:RQqBteOutP4H1xJTINpSEpX

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks