Overview

overview

10

Static

static

3

2025-01-08...ch.exe

windows7-x64

3

2025-01-08...ch.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-08_b750994128a449ae2769153bd37498a4_frostygoop_poet-rat_snatch

  • Size

    8.0MB

  • Sample

    250108-awe3naxrcn

  • MD5

    b750994128a449ae2769153bd37498a4

  • SHA1

    3d3f9cfb25adf0c984412f415c4b042cd126e069

  • SHA256

    8aed9ad03b8a2dd0136195bc87ead9a5a9de41446bc95e55cbfa85b93b84eb72

  • SHA512

    dd90221cd2e1072a1ca76356ae5c3bc6a9137a8d10e4881f98fdc4749ccb3a80984d56dbde11104148589201eb4700fc32d8a73796555f4dff28e75daa20b302

  • SSDEEP

    98304:9iwJuMJvjakNPmggPFKsjU76CM7bSNe8/C+fwCQ+yN4:xpnT/M

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://caffegclasiqwp.shop/api

https://stamppreewntnq.shop/api

https://stagedchheiqwo.shop/api

https://millyscroqwp.shop/api

https://evoliutwoqm.shop/api

https://condedqpwqm.shop/api

https://traineiwnqo.shop/api

https://locatedblsoqp.shop/api

https://tellyqperoiqo.shop/api

Targets

    • Target

      2025-01-08_b750994128a449ae2769153bd37498a4_frostygoop_poet-rat_snatch

    • Size

      8.0MB

    • MD5

      b750994128a449ae2769153bd37498a4

    • SHA1

      3d3f9cfb25adf0c984412f415c4b042cd126e069

    • SHA256

      8aed9ad03b8a2dd0136195bc87ead9a5a9de41446bc95e55cbfa85b93b84eb72

    • SHA512

      dd90221cd2e1072a1ca76356ae5c3bc6a9137a8d10e4881f98fdc4749ccb3a80984d56dbde11104148589201eb4700fc32d8a73796555f4dff28e75daa20b302

    • SSDEEP

      98304:9iwJuMJvjakNPmggPFKsjU76CM7bSNe8/C+fwCQ+yN4:xpnT/M

    Score
    10/10
    discoverylummastealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks