General

  • Target

    PASS-1234.zip

  • Size

    36.9MB

  • Sample

    250107-ytx3fswnhv

  • MD5

    73a0f77096be00e01d614a177b9d3a41

  • SHA1

    5d09c5ca5d5b34abcca68ae4110e738e40a0fde8

  • SHA256

    a674b5bd6be3ce552fb0851d40c1a99f35bf316fa65b2080c220cbdc3b70b005

  • SHA512

    4cb51bd63fd48acc954b770e8fa097119f518addcd7c03e248b32b35e81204e41217283e030ebafc3225c251efa7458096bb69de91c3fa3a886d89e8603224ef

  • SSDEEP

    786432:nJ8nuq+CaDeprnuq+CaDepAnuq+CaDeplnuq+CaDepCnuq+CaDepXnuq+CaDepcs:nv3Caap63CaapJ3CaapQ3CaapP3Caapp

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      PASS-1234.zip

    • Size

      36.9MB

    • MD5

      73a0f77096be00e01d614a177b9d3a41

    • SHA1

      5d09c5ca5d5b34abcca68ae4110e738e40a0fde8

    • SHA256

      a674b5bd6be3ce552fb0851d40c1a99f35bf316fa65b2080c220cbdc3b70b005

    • SHA512

      4cb51bd63fd48acc954b770e8fa097119f518addcd7c03e248b32b35e81204e41217283e030ebafc3225c251efa7458096bb69de91c3fa3a886d89e8603224ef

    • SSDEEP

      786432:nJ8nuq+CaDeprnuq+CaDepAnuq+CaDeplnuq+CaDepCnuq+CaDepXnuq+CaDepcs:nv3Caap63CaapJ3CaapQ3CaapP3Caapp

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks