General

  • Target

    2025-01-10_72ef0068687122ecc2afda6d961dcc68_frostygoop_poet-rat_snatch

  • Size

    5.0MB

  • Sample

    250110-y8frqaykfq

  • MD5

    72ef0068687122ecc2afda6d961dcc68

  • SHA1

    544d914e4efac7c1e8ad8db9d451842b92fe7da6

  • SHA256

    205acfbdf0cd86826cd6e6231519399f7cf5982d4dfca3f5849f5026a29030b7

  • SHA512

    7b95cdd2241400c466f993c7ed114fc0aef2065781bbe5d2dbef8eb08b61a0287361ada4eeb53e4d802ea48cdc0d9e54945a31569cf4e85067151840aaa7905c

  • SSDEEP

    49152:xQNyS4IEfDRZE0CzuJ8frjP8fl0Tw9fEmXva24V4Mzesc2IWx1AFT3Wb:xKFyf95Cz1Djjw9bGEJ

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      2025-01-10_72ef0068687122ecc2afda6d961dcc68_frostygoop_poet-rat_snatch

    • Size

      5.0MB

    • MD5

      72ef0068687122ecc2afda6d961dcc68

    • SHA1

      544d914e4efac7c1e8ad8db9d451842b92fe7da6

    • SHA256

      205acfbdf0cd86826cd6e6231519399f7cf5982d4dfca3f5849f5026a29030b7

    • SHA512

      7b95cdd2241400c466f993c7ed114fc0aef2065781bbe5d2dbef8eb08b61a0287361ada4eeb53e4d802ea48cdc0d9e54945a31569cf4e85067151840aaa7905c

    • SSDEEP

      49152:xQNyS4IEfDRZE0CzuJ8frjP8fl0Tw9fEmXva24V4Mzesc2IWx1AFT3Wb:xKFyf95Cz1Djjw9bGEJ

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks