General

  • Target

    Fluxion Launcher.rar

  • Size

    3.3MB

  • Sample

    250109-v17zfsxpdl

  • MD5

    eee78ef06b0bee50ebeb26dd87c810ce

  • SHA1

    a098985153e9b9c68f42e891045845cbb4d3b915

  • SHA256

    ac9881ba3da632e68be376d6ac307962bd9116fa2240a3eb53f564f8f8d2673e

  • SHA512

    135c0c65cd9cfc4f146aba090899ebaffbdbc71816365a568473e8837e0b43e0cb9e031f78dfa4469334a519d09d516db5204a344bbeedc65cf2840d40a776f3

  • SSDEEP

    98304:3sMGdImCv5E3aYmlKvA43Y0Ozi/uIArpyKg:395mqE37A6XNOu/uNrpyL

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://robinsharez.shop/api

https://handscreamny.shop/api

https://chipdonkeruz.shop/api

https://versersleep.shop/api

https://crowdwarek.shop/api

https://apporholis.shop/api

https://femalsabler.shop/api

https://soundtappysk.shop/api

https://letterdrive.shop/api

Targets

    • Target

      Fluxion Launcher.rar

    • Size

      3.3MB

    • MD5

      eee78ef06b0bee50ebeb26dd87c810ce

    • SHA1

      a098985153e9b9c68f42e891045845cbb4d3b915

    • SHA256

      ac9881ba3da632e68be376d6ac307962bd9116fa2240a3eb53f564f8f8d2673e

    • SHA512

      135c0c65cd9cfc4f146aba090899ebaffbdbc71816365a568473e8837e0b43e0cb9e031f78dfa4469334a519d09d516db5204a344bbeedc65cf2840d40a776f3

    • SSDEEP

      98304:3sMGdImCv5E3aYmlKvA43Y0Ozi/uIArpyKg:395mqE37A6XNOu/uNrpyL

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks