General

  • Target

    9692fcb7996881ff1489818817d4b300.bin

  • Size

    349KB

  • Sample

    250107-byny1sxnht

  • MD5

    b25e996fbd731a84c7fe4a5aae0f40f2

  • SHA1

    cc03418e60c877f9c3975fa345c9a311321d6993

  • SHA256

    aa53e482d0d942406e9b07f16815dde4103c4ad9301e274338087ffccbcfa091

  • SHA512

    a05f9daa8334be2c3b8868e107573ba90a4ff57cfc1fd771fcd56d6eb175602978b9924437fc22fc2baea0ab648955122a4c2fb811940d7a656de871848743ab

  • SSDEEP

    6144:k2Q+ICoLlNI1Wfdlc5NHzNbyLGptYgdnVozaLJyHA7XaTegVN+npPUdsKPr/uTYX:k5+ICoH4ikBtyLazPeA7i7+p4sEr/mB2

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://fancywaxxers.shop/api

Targets

    • Target

      7931b9a8460e753cf1f42b6dc5dd0b32e40a17d19dd94b2fcbba55817a9a77b6.exe

    • Size

      374KB

    • MD5

      9692fcb7996881ff1489818817d4b300

    • SHA1

      17c9a0067ad325da87a096e62715848b8fc4ea34

    • SHA256

      7931b9a8460e753cf1f42b6dc5dd0b32e40a17d19dd94b2fcbba55817a9a77b6

    • SHA512

      541ad18f7ad479017167cbcb193e0e96cf3de502021c36bb9f001d2b2fc55efc32d1457d2ebdb6ef3336c902e6e2dd406f2747b319c0ea5f6777d965f6318762

    • SSDEEP

      6144:p2pwktDrDuMtVXo6MFbdQChRNraGhIlWW1n88gupG3XZ6AZP5dw7rGViJdh4lQ9u:d4CmYP1SC7Np61uXHzPPVU9FmJ1CXEEO

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks