General

  • Target

    anti-malware-setup.exe

  • Size

    3.9MB

  • Sample

    250110-mlhr1svjdj

  • MD5

    fedb69af5de74d46366ad0570e77d9ac

  • SHA1

    a85c8c91780e9366fafc2aba2d13e5b3a49c37ba

  • SHA256

    61316bc78fb84aaa2d5fd1e10aec9a8cf96ab5ac7ee1436048eb7fd199045310

  • SHA512

    1aa337e9aaaaa51651398fb5996356241c818bc6851139769577eb91d332d868edc0b6a53d029efe72f0b74f83551fb3f826d016170c3418b9a8fbfbe668caed

  • SSDEEP

    49152:Qx0uAJAxX0YdindluiIoFcr/sy/sdHEVjUaw7QNwZ/cKP93:XuA6nUCoFwwg4/cKF

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://enterwahsh.biz/api

Targets

    • Target

      anti-malware-setup.exe

    • Size

      3.9MB

    • MD5

      fedb69af5de74d46366ad0570e77d9ac

    • SHA1

      a85c8c91780e9366fafc2aba2d13e5b3a49c37ba

    • SHA256

      61316bc78fb84aaa2d5fd1e10aec9a8cf96ab5ac7ee1436048eb7fd199045310

    • SHA512

      1aa337e9aaaaa51651398fb5996356241c818bc6851139769577eb91d332d868edc0b6a53d029efe72f0b74f83551fb3f826d016170c3418b9a8fbfbe668caed

    • SSDEEP

      49152:Qx0uAJAxX0YdindluiIoFcr/sy/sdHEVjUaw7QNwZ/cKP93:XuA6nUCoFwwg4/cKF

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks