Resubmissions

08-01-2025 17:02

250108-vj78wsynfl 10

06-01-2025 23:34

250106-3kddxasrbw 10

General

  • Target

    2f1a930aa5ce429a2d891adf0934b969b239f1261b9f5822f3d6c1b3502248fd.exe

  • Size

    14.5MB

  • Sample

    250108-vj78wsynfl

  • MD5

    05b576691acf4160e39404e3044c30f3

  • SHA1

    a27657cbdbc563c070f7888e18fe0f8909f69eee

  • SHA256

    2f1a930aa5ce429a2d891adf0934b969b239f1261b9f5822f3d6c1b3502248fd

  • SHA512

    ea17944dd1f3915cd8ca6a6144874fbd79430b590752bc7d262f745914da148d9153af8b0fc7b3d7c9a1152406155a1631438ea151e3ed98efb514395f42f3a3

  • SSDEEP

    98304:5XgQiZESXRsk6hixEEYCOKvGR2bAr154R/7qE4vPJfzoqdqxoq:516BohiWTCOcW2bAyR/734vPxzo

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://weiggheticulop.shop/api

https://consciousourwi.shop/api

https://southedhiscuso.shop/api

https://deicedosmzj.shop/api

https://cagedwifedsozm.shop/api

https://charecteristicdxp.shop/api

https://interactiedovspm.shop/api

https://potentioallykeos.shop/api

https://parallellywko.shop/api

Targets

    • Target

      2f1a930aa5ce429a2d891adf0934b969b239f1261b9f5822f3d6c1b3502248fd.exe

    • Size

      14.5MB

    • MD5

      05b576691acf4160e39404e3044c30f3

    • SHA1

      a27657cbdbc563c070f7888e18fe0f8909f69eee

    • SHA256

      2f1a930aa5ce429a2d891adf0934b969b239f1261b9f5822f3d6c1b3502248fd

    • SHA512

      ea17944dd1f3915cd8ca6a6144874fbd79430b590752bc7d262f745914da148d9153af8b0fc7b3d7c9a1152406155a1631438ea151e3ed98efb514395f42f3a3

    • SSDEEP

      98304:5XgQiZESXRsk6hixEEYCOKvGR2bAr154R/7qE4vPJfzoqdqxoq:516BohiWTCOcW2bAyR/734vPxzo

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks