General

  • Target

    9c4afe3e68312e44bbaa3f122a251bb087f72d94adf8d432bdd8382087086c92N.exe

  • Size

    381KB

  • Sample

    250107-zzlr2s1jel

  • MD5

    e9f13d0b330a73ece569b6115d2ac4f0

  • SHA1

    ae46dcc7a771c7adf161ddd0f48b6b5b5f22bfda

  • SHA256

    9c4afe3e68312e44bbaa3f122a251bb087f72d94adf8d432bdd8382087086c92

  • SHA512

    d1281ae02e0430d01339213c737c3aec2675b6a6983d6da170bc0afcaee1b70a89b654baa250d7e69211219f315a28ec22b5f7faa1ea5382144e7a85630bc267

  • SSDEEP

    6144:72pwktDrDuMt4Bgj04zLS/70E7IodJ6vsVzsooEAPmIV49g2/GzrtXAlGSIxj76o:L4Cj45zA7Fv6vsVOzm9t/Gzr9AsVP6Qt

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      9c4afe3e68312e44bbaa3f122a251bb087f72d94adf8d432bdd8382087086c92N.exe

    • Size

      381KB

    • MD5

      e9f13d0b330a73ece569b6115d2ac4f0

    • SHA1

      ae46dcc7a771c7adf161ddd0f48b6b5b5f22bfda

    • SHA256

      9c4afe3e68312e44bbaa3f122a251bb087f72d94adf8d432bdd8382087086c92

    • SHA512

      d1281ae02e0430d01339213c737c3aec2675b6a6983d6da170bc0afcaee1b70a89b654baa250d7e69211219f315a28ec22b5f7faa1ea5382144e7a85630bc267

    • SSDEEP

      6144:72pwktDrDuMt4Bgj04zLS/70E7IodJ6vsVzsooEAPmIV49g2/GzrtXAlGSIxj76o:L4Cj45zA7Fv6vsVOzm9t/Gzr9AsVP6Qt

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks