Overview

overview

10

Static

static

3

2025-01-07...ch.exe

windows7-x64

10

2025-01-07...ch.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-07_1a72a337650ef5f104428959fccd9213_frostygoop_snatch

  • Size

    3.7MB

  • Sample

    250107-h7nsyasmar

  • MD5

    1a72a337650ef5f104428959fccd9213

  • SHA1

    267e3081d3e6ed6b5d0b2ec2382f7d4e9a38d8e8

  • SHA256

    b74977553c9603139c0b5dcde008e08d59bb83ea9d345ad25e6d07cd936a000f

  • SHA512

    63282ccd4603007aeff5e42adc061bcf1d48596a4b4ff795e9878db508c9ce0f1c74de3fce99734f9b784dd90341a58282c8ebb755c9d5b18615cce8bfdddcee

  • SSDEEP

    49152:3R/W9yhKrDPtTbvMr2aQPF7Ifxzce3qLz+LZwNhVwZotmdmjcE68l1nF19B7:3R/jitHEraLz9CqtmQ

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://hummskitnj.buzz/api

https://cashfuzysao.buzz/api

https://appliacnesot.buzz/api

https://screwamusresz.buzz/api

https://inherineau.buzz/api

https://scentniej.buzz/api

https://rebuildeso.buzz/api

https://prisonyfork.buzz/api

Targets

    • Target

      2025-01-07_1a72a337650ef5f104428959fccd9213_frostygoop_snatch

    • Size

      3.7MB

    • MD5

      1a72a337650ef5f104428959fccd9213

    • SHA1

      267e3081d3e6ed6b5d0b2ec2382f7d4e9a38d8e8

    • SHA256

      b74977553c9603139c0b5dcde008e08d59bb83ea9d345ad25e6d07cd936a000f

    • SHA512

      63282ccd4603007aeff5e42adc061bcf1d48596a4b4ff795e9878db508c9ce0f1c74de3fce99734f9b784dd90341a58282c8ebb755c9d5b18615cce8bfdddcee

    • SSDEEP

      49152:3R/W9yhKrDPtTbvMr2aQPF7Ifxzce3qLz+LZwNhVwZotmdmjcE68l1nF19B7:3R/jitHEraLz9CqtmQ

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks