Resubmissions

09/01/2025, 17:20

250109-vwvtbsvqcy10

09/01/2025, 10:39

250109-mp3atszlen10

General

  • Target
    Insomnia.exe
  • Size 5.0MB
  • Sample250109-vwvtbsvqcy
  • SHA256 e683fc5582f346d3c1e1e20f888c0fae1e978acf348f4e8c79f68378dca1288b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • lumma

C2
  • https://cloudewahsj.shop/api

  • https://rabidcowse.shop/api

  • https://noisycuttej.shop/api

  • https://tirepublicerj.shop/api

  • https://framekgirus.shop/api

  • https://wholersorie.shop/api

  • https://abruptyopsn.shop/api

  • https://nearycrepso.shop/api

Targets

    • Target
      Insomnia.exe
    • Size 5.0MB
    • SHA256 e683fc5582f346d3c1e1e20f888c0fae1e978acf348f4e8c79f68378dca1288b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks