General

  • Target

    Cheat.zip

  • Size

    94.2MB

  • Sample

    250107-b3axyszpak

  • MD5

    96c9881606bf62f0765f5c64a462e9f8

  • SHA1

    e721be19a9bc4943d0250adc2d91289fb9ef21ae

  • SHA256

    7ad218afff3cb420c26e4838ba1d9d6e1eb0fa5e54d68ef4443ee05dd135c43e

  • SHA512

    243982713fbb99e5fd2b32e072cf35971fa2dd9d8ad9c32aa35d858c8bdbf49243989faa874897d3365a7ea2f67bc67b695e7c0143ac5fb61238729ae4e2c37c

  • SSDEEP

    1572864:MtiC8s61NBU5bO6T0SozLUvMpZQKalolWRUQu4WiTOYq6XKcqTmx5mvJcgAIJTu7:KiFs+NBsq5zLUv0i2WiWtTG+KH+mRcgi

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      Cheat.zip

    • Size

      94.2MB

    • MD5

      96c9881606bf62f0765f5c64a462e9f8

    • SHA1

      e721be19a9bc4943d0250adc2d91289fb9ef21ae

    • SHA256

      7ad218afff3cb420c26e4838ba1d9d6e1eb0fa5e54d68ef4443ee05dd135c43e

    • SHA512

      243982713fbb99e5fd2b32e072cf35971fa2dd9d8ad9c32aa35d858c8bdbf49243989faa874897d3365a7ea2f67bc67b695e7c0143ac5fb61238729ae4e2c37c

    • SSDEEP

      1572864:MtiC8s61NBU5bO6T0SozLUvMpZQKalolWRUQu4WiTOYq6XKcqTmx5mvJcgAIJTu7:KiFs+NBsq5zLUv0i2WiWtTG+KH+mRcgi

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks