General

  • Target

    af882c81ad0b7222edaad60172760c54ddaf0cfc9fc107651d3d84741c5b1eaf.exe

  • Size

    345KB

  • Sample

    250108-k88wlstmes

  • MD5

    6638ca9249bafd03ecea0b9aa86a7472

  • SHA1

    7a0d8aefad129eb10b73a64efdcf2de2b9c94475

  • SHA256

    af882c81ad0b7222edaad60172760c54ddaf0cfc9fc107651d3d84741c5b1eaf

  • SHA512

    fb0a6567959111dceca59f01b2d67c807d4a890c64d580ae8657f2598605c3e34bf7e6d935733a8b54beb980bd9801c39a24f9955f5eb3c995db0ca08ce6b448

  • SSDEEP

    6144:0TVsgo5qJgKjOfDDBrwHJAtlsGMpZh7exUG0Gv0JYlCaLSmJ3/n2r:6Vi8go6BrwSMpZg+GBv0JYlCaXJ34

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://fancywaxxers.shop/api

Targets

    • Target

      af882c81ad0b7222edaad60172760c54ddaf0cfc9fc107651d3d84741c5b1eaf.exe

    • Size

      345KB

    • MD5

      6638ca9249bafd03ecea0b9aa86a7472

    • SHA1

      7a0d8aefad129eb10b73a64efdcf2de2b9c94475

    • SHA256

      af882c81ad0b7222edaad60172760c54ddaf0cfc9fc107651d3d84741c5b1eaf

    • SHA512

      fb0a6567959111dceca59f01b2d67c807d4a890c64d580ae8657f2598605c3e34bf7e6d935733a8b54beb980bd9801c39a24f9955f5eb3c995db0ca08ce6b448

    • SSDEEP

      6144:0TVsgo5qJgKjOfDDBrwHJAtlsGMpZh7exUG0Gv0JYlCaLSmJ3/n2r:6Vi8go6BrwSMpZg+GBv0JYlCaXJ34

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks