General

  • Target

    2025-01-08_9125f7be6040d8007f8f01c8a694093d_frostygoop_snatch

  • Size

    3.7MB

  • Sample

    250108-cbpsga1kcp

  • MD5

    9125f7be6040d8007f8f01c8a694093d

  • SHA1

    78fb6d6c32603b2f96f1ea6724958c8174416c7c

  • SHA256

    06d112f3a0c8ac94ea6fbd5238cae4ad2714822fa560986f17fadd713a9f854b

  • SHA512

    d65d170659106efb7e4c00b86ef15ded5a4d537b67b82dd24876b32ace57b94e661b022594f7aaf3460d214271d9753ae0bd0093ec1c1a6e1a6af9ae3ff2d442

  • SSDEEP

    49152:+cWc+BmELGlkA0EhnZLLEXSHIv2IVADlZMy6M3amhITeL2Jx6RkIKyI8IDwJcTrp:+cW6KAder8ZzmPIe

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      2025-01-08_9125f7be6040d8007f8f01c8a694093d_frostygoop_snatch

    • Size

      3.7MB

    • MD5

      9125f7be6040d8007f8f01c8a694093d

    • SHA1

      78fb6d6c32603b2f96f1ea6724958c8174416c7c

    • SHA256

      06d112f3a0c8ac94ea6fbd5238cae4ad2714822fa560986f17fadd713a9f854b

    • SHA512

      d65d170659106efb7e4c00b86ef15ded5a4d537b67b82dd24876b32ace57b94e661b022594f7aaf3460d214271d9753ae0bd0093ec1c1a6e1a6af9ae3ff2d442

    • SSDEEP

      49152:+cWc+BmELGlkA0EhnZLLEXSHIv2IVADlZMy6M3amhITeL2Jx6RkIKyI8IDwJcTrp:+cW6KAder8ZzmPIe

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks