General

  • Target

    [UPD]Intel_Unit.2.1.exe

  • Size

    1.1MB

  • Sample

    250107-ryyffsxkal

  • MD5

    25b4bac0866214df0bcb32a8dc280555

  • SHA1

    58513411b725c0f264013acacaba7fe069208aa7

  • SHA256

    17e8ebdf1c3303f6c9538e9998e533962aa732a1356434d6cf78ab353f3a9f06

  • SHA512

    4f63a60288d8e15eb01843d1ecc61344606a4e3bf0933cf8bd02892dbb7d2167b7b35d4ff17c5207b25057520d7147bfa4bed38d75b6429f0c9ebe6458de592d

  • SSDEEP

    24576:setHGMwy9WuUSPl/hw6z89q1zfaaJ+1DPVhPQLc3nVQMd:j7zMU+0pJQ9hPQcQu

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      [UPD]Intel_Unit.2.1.exe

    • Size

      1.1MB

    • MD5

      25b4bac0866214df0bcb32a8dc280555

    • SHA1

      58513411b725c0f264013acacaba7fe069208aa7

    • SHA256

      17e8ebdf1c3303f6c9538e9998e533962aa732a1356434d6cf78ab353f3a9f06

    • SHA512

      4f63a60288d8e15eb01843d1ecc61344606a4e3bf0933cf8bd02892dbb7d2167b7b35d4ff17c5207b25057520d7147bfa4bed38d75b6429f0c9ebe6458de592d

    • SSDEEP

      24576:setHGMwy9WuUSPl/hw6z89q1zfaaJ+1DPVhPQLc3nVQMd:j7zMU+0pJQ9hPQcQu

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks