General

  • Target

    fsuipc4 serial keygen and crack.7z

  • Size

    14.4MB

  • Sample

    250110-ktpt7ayqgz

  • MD5

    a736dbda9e6a7e75f8d8604e6423e7ec

  • SHA1

    35790ba5331c48d5fea7fc30adf616da23ea5223

  • SHA256

    8d4f57312019c8ad48d1b0801396babcd4d1dd99fb03f3860ddf66939da7b5b8

  • SHA512

    9f04e3906f3a8e0fbc696681f04872ec9d6477511b349d193b73043cfb6e801563743bf8f108a2eabb6268b13a4ea8b9afbd2869fc0f103c80c2490668536781

  • SSDEEP

    393216:sbylrknhl7M4N36I6NVbJIK7mI9lDCbgv7mwsaM:onzg4N3eNVNIk2bx

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://robinsharez.shop/api

https://handscreamny.shop/api

https://chipdonkeruz.shop/api

https://versersleep.shop/api

https://crowdwarek.shop/api

https://apporholis.shop/api

https://femalsabler.shop/api

https://soundtappysk.shop/api

https://desiredirefus.cyou/api

Extracted

Family

lumma

C2

https://desiredirefus.cyou/api

Targets

    • Target

      fsuipc4 serial keygen and crack.exe

    • Size

      911.2MB

    • MD5

      b8adb6764499e96a0c37038a2428aa1b

    • SHA1

      964ffaabb17dfbe8f4fb5ccd629d645882f0c08a

    • SHA256

      28274181e340b8e1d0ba57543ca871cbec9e95660336ef80613363ba2c2f64b2

    • SHA512

      9ca8300d31bd8c7ddd158a9e9f0029a05196c557d5fc6f6e606306f2fcd585c955c76cda097e24efa596d454514a6b779db2569745bc4bbeee76156e5c59018d

    • SSDEEP

      196608:wlm1Q9RCYZEjXWtOqnuUPsq4i6PqQurkrDH2LFpFhKB422SlvokaT1Z9HMHNk7En:wl5bZVnaTsDkQFj10kI1P

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks