Overview

overview

10

Static

static

3

mmpack.exe

windows10-ltsc 2021-x64

10

mmpack.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    mm.zip

  • Size

    334KB

  • Sample

    250110-an7spsxpeq

  • MD5

    be8d65922e75aff53f0a8b9a6d98e731

  • SHA1

    24e1e518baadf452b7d06219aa444f321c018fa1

  • SHA256

    c5a90c45d7b6ec0a90698ac31712735d50cf670c0881af9429c83f692ba7f43b

  • SHA512

    fd5e345c095e0318df054d78365619579bd816adfd206c49a5accc28f0ff5aa19f5585d850dbd9bdc6c845eab8f1dd1475ed32fff18ad724a34c3b09ff9b40ff

  • SSDEEP

    6144:emmNEz9uI8tcgzNORfjccLQwzIxn6wpN+1eI9qhQlOD4Y4kJOBDev7ibucWn:JJuI8tbzoRfdLxPJy4YY5u7ibup

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://truculengisau.biz/api

https://spookycappy.biz/api

https://punishzement.biz/api

https://nuttyshop/api

https://nuttyshopr.biz/api

https://marketlumpe.biz/api

https://littlenotii.biz/api

https://grandiouseziu.biz/api

https://fraggielek.biz/api

Extracted

Family

lumma

C2

https://fraggielek.biz/api

https://grandiouseziu.biz/api

https://littlenotii.biz/api

https://marketlumpe.biz/api

https://nuttyshopr.biz/api

https://punishzement.biz/api

https://spookycappy.biz/api

https://truculengisau.biz/api

Targets

    • Target

      mmpack.exe

    • Size

      348KB

    • MD5

      b0699f53dfb455dc80011d9c6d34bcc1

    • SHA1

      4f3a909416a81c95a5253c4df2a275a953313bcf

    • SHA256

      5131d285914de648121ba99b3ec9e99c170c14cb0c64192addcc343554869286

    • SHA512

      7f47784ad9153b64844d2fcdd2aadccee698922f626639dc223d17398b4b388cceb89638ce001fa9d4a4672117088c425e500601d9e69d436014b6cfb5942fb1

    • SSDEEP

      6144:JVQLpl89uI8tc6zNARfjccLQIzIxnCwpN+TeI9qhQlOT4YikJOBDe77ibuLWi:7QOuI8t7zORfdLNPL84Y25E7ibu3

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks