Overview

overview

10

Static

static

3

Collapse.zip

windows7-x64

1

Collapse.zip

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Collapse.zip

  • Size

    54.3MB

  • Sample

    250110-sf1crsxqcv

  • MD5

    c9c09a7de133528b18d8687475099f00

  • SHA1

    92efc6c5a138d5631dd113cbc0f501f8e1d6f5c2

  • SHA256

    d94fafd3cbab6f1fc8486ba4f56f21723aa4934e04a8d91e1fec10c5d8fdf67f

  • SHA512

    d8a2eded28250713e55475258c769156300ff5770c28ae447690ed4fbe33ababf2972577f67c9d0f09ad55811f16e439d89789238be56992068f18e44bc7957e

  • SSDEEP

    1572864:YHEcPNHBrThiiGaNh7YQU44tu/Thr2hL4Yyqxb:YH7FVThZNVYn4euQF47qV

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://whisperusz.biz/api

https://fraggielek.biz/api

https://grandiouseziu.biz/api

https://littlenotii.biz/api

https://marketlumpe.biz/api

https://nuttyshopr.biz/api

https://punishzement.biz/api

https://spookycappy.biz/api

https://truculengisau.biz/api

Targets

    • Target

      Collapse.zip

    • Size

      54.3MB

    • MD5

      c9c09a7de133528b18d8687475099f00

    • SHA1

      92efc6c5a138d5631dd113cbc0f501f8e1d6f5c2

    • SHA256

      d94fafd3cbab6f1fc8486ba4f56f21723aa4934e04a8d91e1fec10c5d8fdf67f

    • SHA512

      d8a2eded28250713e55475258c769156300ff5770c28ae447690ed4fbe33ababf2972577f67c9d0f09ad55811f16e439d89789238be56992068f18e44bc7957e

    • SSDEEP

      1572864:YHEcPNHBrThiiGaNh7YQU44tu/Thr2hL4Yyqxb:YH7FVThZNVYn4euQF47qV

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks