General

  • Target

    setup.exe

  • Size

    71.1MB

  • Sample

    250110-y6npjsykam

  • MD5

    cba1d2bf7aadf6edad9b1074f1d52bc0

  • SHA1

    a90cc53c1ee1299cb5c574bc3fc05198e3b23946

  • SHA256

    d95f10c803cc592a57604241152555f90f4699e8e34cdc3b2189b2a752724024

  • SHA512

    57e20798450eeb1ebbf19b776ff3a2d7dc4d199f64fdc5e80184333afdccc41729cd24cccd8854c443d1bdd153f0875fbfe435446c9a29d1086fa57b8035c78b

  • SSDEEP

    24576:L+QSkqgJVQNDa5lZe9fvyErqPW+UHx+/szlzBF6TmJaxEX:L7Xqei9f7qw3BzB8Tk

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://relatiounces.cyou/api

https://fraggielek.biz/api

https://grandiouseziu.biz/api

https://littlenotii.biz/api

https://marketlumpe.biz/api

https://nuttyshopr.biz/api

https://punishzement.biz/api

https://spookycappy.biz/api

https://truculengisau.biz/api

Targets

    • Target

      setup.exe

    • Size

      71.1MB

    • MD5

      cba1d2bf7aadf6edad9b1074f1d52bc0

    • SHA1

      a90cc53c1ee1299cb5c574bc3fc05198e3b23946

    • SHA256

      d95f10c803cc592a57604241152555f90f4699e8e34cdc3b2189b2a752724024

    • SHA512

      57e20798450eeb1ebbf19b776ff3a2d7dc4d199f64fdc5e80184333afdccc41729cd24cccd8854c443d1bdd153f0875fbfe435446c9a29d1086fa57b8035c78b

    • SSDEEP

      24576:L+QSkqgJVQNDa5lZe9fvyErqPW+UHx+/szlzBF6TmJaxEX:L7Xqei9f7qw3BzB8Tk

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks