General

  • Target

    Rgr8LJz.exe

  • Size

    339KB

  • Sample

    250108-p6xssazrcy

  • MD5

    20155323669fd610a0c7201be666fbd6

  • SHA1

    99bb4dcee2ba86b0f6220ecbefffd1700e44ba71

  • SHA256

    586b3a854631ed30c8aefbde7edcf3a725d7c40a4a56c8ebc17aeb64979ea442

  • SHA512

    338382b16e2cd2b3edce364aa2f92281769ee39dcfb990b6da94dcac477df9c29ef25636026e5a8491e5a3fe2c24b04d501b94e72935501a32af1db8d5d196c9

  • SSDEEP

    6144:yZZzgHPaRciI8PDjb17g5esNPwOR716Z6NWk8C93PG+gHT8oAu7us9SOv3KZts:y/Dq18PDdJNOR7cZdk8CZBiT8obus9Lj

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://robinsharez.shop/api

https://handscreamny.shop/api

https://chipdonkeruz.shop/api

https://versersleep.shop/api

https://crowdwarek.shop/api

https://apporholis.shop/api

https://femalsabler.shop/api

https://soundtappysk.shop/api

Extracted

Family

lumma

C2

https://soundtappysk.shop/api

https://femalsabler.shop/api

https://apporholis.shop/api

https://crowdwarek.shop/api

https://versersleep.shop/api

https://chipdonkeruz.shop/api

https://handscreamny.shop/api

https://robinsharez.shop/api

Targets

    • Target

      Rgr8LJz.exe

    • Size

      339KB

    • MD5

      20155323669fd610a0c7201be666fbd6

    • SHA1

      99bb4dcee2ba86b0f6220ecbefffd1700e44ba71

    • SHA256

      586b3a854631ed30c8aefbde7edcf3a725d7c40a4a56c8ebc17aeb64979ea442

    • SHA512

      338382b16e2cd2b3edce364aa2f92281769ee39dcfb990b6da94dcac477df9c29ef25636026e5a8491e5a3fe2c24b04d501b94e72935501a32af1db8d5d196c9

    • SSDEEP

      6144:yZZzgHPaRciI8PDjb17g5esNPwOR716Z6NWk8C93PG+gHT8oAu7us9SOv3KZts:y/Dq18PDdJNOR7cZdk8CZBiT8obus9Lj

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks