Resubmissions

10-01-2025 00:14

250110-ajqnmaxnel 10

10-01-2025 00:12

250110-ahmkksxncl 1

10-01-2025 00:10

250110-af2aysvpev 1

10-01-2025 00:00

250110-aahawsvncx 1

General

  • Target

    Adobe Premiere Pro.zip

  • Size

    323.0MB

  • Sample

    250110-ajqnmaxnel

  • MD5

    e6c04f9bfda7a577cb7fdb6d2a0ccda0

  • SHA1

    d56683262ee8ed33f251b61555d6461024b5ad73

  • SHA256

    2821d514d367b3daeb061bfbb0bda555ce3af15f6133c1443412fdcb8715d4e6

  • SHA512

    bb350a944efd528ce6585de07d33368eef16b514198a970d005660ca71578983a2164bc81ba49c78217b1a0da82d8c874ff157955c71c892f6af32ed6855d25d

  • SSDEEP

    786432:kwlxmMesnehIpl7NAsqD1JV2OTX+46MGcToR06:Tnn1RqD1v2OgMvoR06

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://robinsharez.shop/api

https://handscreamny.shop/api

https://chipdonkeruz.shop/api

https://versersleep.shop/api

https://crowdwarek.shop/api

https://apporholis.shop/api

https://femalsabler.shop/api

https://soundtappysk.shop/api

https://imbibegoos.cyou/api

Extracted

Family

lumma

C2

https://imbibegoos.cyou/api

Targets

    • Target

      Adobe Premiere Pro/How to install.txt

    • Size

      158B

    • MD5

      2e6d0c89e28a40f0a618d0082fb5d86b

    • SHA1

      db61015c18fb9ae9abca89fb34014b4ed99d5284

    • SHA256

      66540318c2aa0a728b0b16ace934b1f7f91150c3c454048ab4259458efeeb1f8

    • SHA512

      439d0634461ebfe4eb2cf1ce4c0285dae239353bbcc8608657fc8746bc8dfc63b1060cc36de11581c4bdd21ca144881d568bee2935aefee1fe86d89c39b4a06c

    Score
    1/10
    • Target

      Adobe Premiere Pro/Release-app-x64.7z

    • Size

      323.0MB

    • MD5

      7a9d95031a2cd8de492cf0984a36d3f1

    • SHA1

      e6d884650d17a89d76b219836ffb7232498ca605

    • SHA256

      51c79b58213173fce67445924b320a1c643cc5311023d363c205577ab906f26b

    • SHA512

      0f1eb9df19f74b72d76d33dd0f051dade19324443d2cc8e087053c602d394748b6548485190cb593d53de9ca66b28971ec236f31a1b4d74ace02b11ac72564ff

    • SSDEEP

      786432:lwlxmMesnehIpl7NAsqD1JV2OTX+46MGcToR0:Snn1RqD1v2OgMvoR0

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks