General

  • Target

    9c4b510c6b65c6fa54a2308b743ecb89dcbd44e9d039c890dc32c75ccf1538e8N.exe

  • Size

    381KB

  • Sample

    250108-n7kzyaypev

  • MD5

    e37c6fb17af3c80377cf78f861c0bd80

  • SHA1

    9b7a465d5e118453b794e577d01d0865b54ee663

  • SHA256

    9c4b510c6b65c6fa54a2308b743ecb89dcbd44e9d039c890dc32c75ccf1538e8

  • SHA512

    623e51f357d4fc054421f817931914dba0cc5bb92ca771f00376c4824d5366972b76c2efce6cfd284331f05008813ebfb1d75e4ea72fd92eab4ae3df9714b88e

  • SSDEEP

    6144:72pwktDrDuMtoAAAySseHfMM/rE3jaIgHT2nC0osguHJL4jG9vKNfuCIO4+hQ3PC:L4C/AFseHEj+IgHTTOg8LDyNijZkZETm

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      9c4b510c6b65c6fa54a2308b743ecb89dcbd44e9d039c890dc32c75ccf1538e8N.exe

    • Size

      381KB

    • MD5

      e37c6fb17af3c80377cf78f861c0bd80

    • SHA1

      9b7a465d5e118453b794e577d01d0865b54ee663

    • SHA256

      9c4b510c6b65c6fa54a2308b743ecb89dcbd44e9d039c890dc32c75ccf1538e8

    • SHA512

      623e51f357d4fc054421f817931914dba0cc5bb92ca771f00376c4824d5366972b76c2efce6cfd284331f05008813ebfb1d75e4ea72fd92eab4ae3df9714b88e

    • SSDEEP

      6144:72pwktDrDuMtoAAAySseHfMM/rE3jaIgHT2nC0osguHJL4jG9vKNfuCIO4+hQ3PC:L4C/AFseHEj+IgHTTOg8LDyNijZkZETm

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks