General

  • Target

    NewInv1.1.0.exe

  • Size

    1.1MB

  • Sample

    250110-nfzzsavqdk

  • MD5

    ec56f2e52cbbbb1ad1507da08be13034

  • SHA1

    2671ea22d4340ac094fd1076b2fb440e19f112bb

  • SHA256

    1846bc2cf1e352a7214870d2a9439f420dedbb3e3348a7b13a7bb7542f627178

  • SHA512

    0822b4274116a2d212959e0bc2a54a8a22269b067b98be2d132373290fdfc2940be5d7e1f98ec70fedadae03297c00da5d3ae7499a4a52623cd96f7b8ef1e2d0

  • SSDEEP

    24576:lXsUIwgY+tXzdBkFVIZkNha1SeQ7894cBhiAkSd3+g:9HINVdcIZJ1Ss9j0AkSdOg

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toemagnifuy.biz/api

https://fraggielek.biz/api

https://grandiouseziu.biz/api

https://littlenotii.biz/api

https://marketlumpe.biz/api

https://nuttyshopr.biz/api

https://punishzement.biz/api

https://spookycappy.biz/api

https://truculengisau.biz/api

Targets

    • Target

      NewInv1.1.0.exe

    • Size

      1.1MB

    • MD5

      ec56f2e52cbbbb1ad1507da08be13034

    • SHA1

      2671ea22d4340ac094fd1076b2fb440e19f112bb

    • SHA256

      1846bc2cf1e352a7214870d2a9439f420dedbb3e3348a7b13a7bb7542f627178

    • SHA512

      0822b4274116a2d212959e0bc2a54a8a22269b067b98be2d132373290fdfc2940be5d7e1f98ec70fedadae03297c00da5d3ae7499a4a52623cd96f7b8ef1e2d0

    • SSDEEP

      24576:lXsUIwgY+tXzdBkFVIZkNha1SeQ7894cBhiAkSd3+g:9HINVdcIZJ1Ss9j0AkSdOg

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks