General

  • Target

    49615905016fb4de6a3b50d12979b1076eca6bc539d9bcbf2ed338b6b2299cc7.exe

  • Size

    6.6MB

  • Sample

    250107-fmz95avphs

  • MD5

    29ca15934b67b18a91254ce253a588ca

  • SHA1

    05dfc5bb1df62ca212e1c8adf5af4542f7ad8b78

  • SHA256

    49615905016fb4de6a3b50d12979b1076eca6bc539d9bcbf2ed338b6b2299cc7

  • SHA512

    f9d961bb6a1dcfb371fd50aa94d8aac60b0de3cef813ec8bb9003ca202b3d6c3611a526ed890583ce0c401ca79ea8088189ba0fd7e3ce3d47a9e159164e9571e

  • SSDEEP

    196608:W2J2evtYNFkAvMzhj2F019IxNGqXzIYK:PztYNFkAvMzhj2F019IxNGqXi

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      49615905016fb4de6a3b50d12979b1076eca6bc539d9bcbf2ed338b6b2299cc7.exe

    • Size

      6.6MB

    • MD5

      29ca15934b67b18a91254ce253a588ca

    • SHA1

      05dfc5bb1df62ca212e1c8adf5af4542f7ad8b78

    • SHA256

      49615905016fb4de6a3b50d12979b1076eca6bc539d9bcbf2ed338b6b2299cc7

    • SHA512

      f9d961bb6a1dcfb371fd50aa94d8aac60b0de3cef813ec8bb9003ca202b3d6c3611a526ed890583ce0c401ca79ea8088189ba0fd7e3ce3d47a9e159164e9571e

    • SSDEEP

      196608:W2J2evtYNFkAvMzhj2F019IxNGqXzIYK:PztYNFkAvMzhj2F019IxNGqXi

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks