General

  • Target

    Solara.exe

  • Size

    526KB

  • Sample

    250107-dsfrkatmfp

  • MD5

    51749a96a9d6c32d40c490e370f1c6c5

  • SHA1

    e4c5b079a557e452b19c24ee8e09d45c0d87df23

  • SHA256

    7494b75566c33c247a381887f26054acc2ea068c2485d5d0cef2fca6812e70e6

  • SHA512

    e4c20bd1bab6f0ef9cea473498d108eda1cf01a29c59da986c350a0834b8fc2d892f6a8810268a2233091d266d4adc4d79699946d974f38672f9815f3b1116f8

  • SSDEEP

    12288:rztE0u86qlmk/5i8go6BrwSMpZg+GBv0JYlCaVJ34:rO0uYlmsD6dGUvHlvJ34

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      Solara.exe

    • Size

      526KB

    • MD5

      51749a96a9d6c32d40c490e370f1c6c5

    • SHA1

      e4c5b079a557e452b19c24ee8e09d45c0d87df23

    • SHA256

      7494b75566c33c247a381887f26054acc2ea068c2485d5d0cef2fca6812e70e6

    • SHA512

      e4c20bd1bab6f0ef9cea473498d108eda1cf01a29c59da986c350a0834b8fc2d892f6a8810268a2233091d266d4adc4d79699946d974f38672f9815f3b1116f8

    • SSDEEP

      12288:rztE0u86qlmk/5i8go6BrwSMpZg+GBv0JYlCaVJ34:rO0uYlmsD6dGUvHlvJ34

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks