General

  • Target

    auto mouse clicker murgee keygenl.exe

  • Size

    794.2MB

  • Sample

    250109-lqa3asylem

  • MD5

    bdfe5b04221a023ee0130a9f1eefe7db

  • SHA1

    41dd8dc9a176542eb65992e857ecfd18c00c1e4a

  • SHA256

    c8694b7ed78223bc8167cd05393579700bb4a3a890ba418b6a13d9763d9a04ec

  • SHA512

    d1ea5d66ad03cc6c9dbc2bf5fa163822b4bd596a286cfc0f32e3e4d9a157804dad6c355f2154d6cf037f2d20258f0e8526ac4cde20f446b6bebb69413dfcbc42

  • SSDEEP

    196608:XWXHBjOxHpnjbCnJ2lVfOtymJU11R5zVwCJlWmQ73toowXrR9ZItL5r7jEGSbDaW:XG1OxJP+Tw+GVYGIL

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://robinsharez.shop/api

https://handscreamny.shop/api

https://chipdonkeruz.shop/api

https://versersleep.shop/api

https://crowdwarek.shop/api

https://apporholis.shop/api

https://femalsabler.shop/api

https://soundtappysk.shop/api

https://desiredirefus.cyou/api

Extracted

Family

lumma

C2

https://desiredirefus.cyou/api

Targets

    • Target

      auto mouse clicker murgee keygenl.exe

    • Size

      794.2MB

    • MD5

      bdfe5b04221a023ee0130a9f1eefe7db

    • SHA1

      41dd8dc9a176542eb65992e857ecfd18c00c1e4a

    • SHA256

      c8694b7ed78223bc8167cd05393579700bb4a3a890ba418b6a13d9763d9a04ec

    • SHA512

      d1ea5d66ad03cc6c9dbc2bf5fa163822b4bd596a286cfc0f32e3e4d9a157804dad6c355f2154d6cf037f2d20258f0e8526ac4cde20f446b6bebb69413dfcbc42

    • SSDEEP

      196608:XWXHBjOxHpnjbCnJ2lVfOtymJU11R5zVwCJlWmQ73toowXrR9ZItL5r7jEGSbDaW:XG1OxJP+Tw+GVYGIL

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks