Resubmissions

09-01-2025 22:46

250109-2qd2yswjcr 10

28-08-2024 21:42

240828-1kmw8szaqj 10

General

  • Target

    66bfee9fd7d9a_lumma.exe

  • Size

    277KB

  • Sample

    250109-2qd2yswjcr

  • MD5

    052bd8a72accfbfddec33ff5848ae51b

  • SHA1

    962cadc386efc98a383fde1d80abf385514ccd05

  • SHA256

    4898b9ca2adfdbf8369786f49ad6a0d8466439f5afd166bb57cded506a7f244f

  • SHA512

    339c74a42ebe24cafea2ae964901fe9128b9bdc8bb8dc9f3b72505c4ce5a39681b0c54888f79dc0983daebde488ba73e0d306d3033597e2a2b2a46f9fe98a597

  • SSDEEP

    6144:gZEPhl2XWuisvCybPM5fL2u5Wz2B2VXxs0+g1EVGMNBnkX2OEO:EEPj2XWD6PM5SK7hDg1EgMNBn3OEO

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://weiggheticulop.shop/api

https://consciousourwi.shop/api

https://southedhiscuso.shop/api

https://deicedosmzj.shop/api

https://cagedwifedsozm.shop/api

https://charecteristicdxp.shop/api

https://interactiedovspm.shop/api

https://potentioallykeos.shop/api

Targets

    • Target

      66bfee9fd7d9a_lumma.exe

    • Size

      277KB

    • MD5

      052bd8a72accfbfddec33ff5848ae51b

    • SHA1

      962cadc386efc98a383fde1d80abf385514ccd05

    • SHA256

      4898b9ca2adfdbf8369786f49ad6a0d8466439f5afd166bb57cded506a7f244f

    • SHA512

      339c74a42ebe24cafea2ae964901fe9128b9bdc8bb8dc9f3b72505c4ce5a39681b0c54888f79dc0983daebde488ba73e0d306d3033597e2a2b2a46f9fe98a597

    • SSDEEP

      6144:gZEPhl2XWuisvCybPM5fL2u5Wz2B2VXxs0+g1EVGMNBnkX2OEO:EEPj2XWD6PM5SK7hDg1EgMNBn3OEO

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks