General

  • Target

    afbbedb22e2f641c6480ea97a6338114c26701f77d49ce24bd736d1a392c4844.exe

  • Size

    381KB

  • Sample

    250108-zfsq9avnar

  • MD5

    7153394fe3d08ecd89e742978f16caf1

  • SHA1

    9045ede6a13c7fc9c0b5bc04c1335dd48bbccc3f

  • SHA256

    afbbedb22e2f641c6480ea97a6338114c26701f77d49ce24bd736d1a392c4844

  • SHA512

    d466a00fcebbc27fdcb663dcdf8f2bc0c330573d3dc5e715d814935e3d3cbcad29dd258de95e18c2fc1b18000bbfed8e8aea39c1950abf2e09b74b48085daa77

  • SSDEEP

    6144:72pwktDrDuMt4Bgj04zLS/70E7IodJ6vsVzsooEAPmIV49g2/GzrtXAlGSIxj76o:L4Cj45zA7Fv6vsVOzm9t/Gzr9AsVP6Q9

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      afbbedb22e2f641c6480ea97a6338114c26701f77d49ce24bd736d1a392c4844.exe

    • Size

      381KB

    • MD5

      7153394fe3d08ecd89e742978f16caf1

    • SHA1

      9045ede6a13c7fc9c0b5bc04c1335dd48bbccc3f

    • SHA256

      afbbedb22e2f641c6480ea97a6338114c26701f77d49ce24bd736d1a392c4844

    • SHA512

      d466a00fcebbc27fdcb663dcdf8f2bc0c330573d3dc5e715d814935e3d3cbcad29dd258de95e18c2fc1b18000bbfed8e8aea39c1950abf2e09b74b48085daa77

    • SSDEEP

      6144:72pwktDrDuMt4Bgj04zLS/70E7IodJ6vsVzsooEAPmIV49g2/GzrtXAlGSIxj76o:L4Cj45zA7Fv6vsVOzm9t/Gzr9AsVP6Q9

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks