General

  • Target

    8d1058166d3845c6d3858d7dd080d95268356c95e3d64de6825c21a688a9fda4N.exe

  • Size

    440KB

  • Sample

    250110-ye2gbstrav

  • MD5

    558a7b52e960079037b02363d58729c0

  • SHA1

    a692f6560cd0f6f1fc2b4e8aa4c3683c150af80a

  • SHA256

    8d1058166d3845c6d3858d7dd080d95268356c95e3d64de6825c21a688a9fda4

  • SHA512

    4def6b88e4a4a39478192c96abdd9521740cf9fef1c11716ef1b7ef38c60d40ff19e81d4d22c71ed934a2f20d51c22d9728fe72f9f65e9e67b926207b0a779b1

  • SSDEEP

    6144:eeTlgNrF2F8WgbDzY2JqMPhU+j4tzVZ1YrsldGcGg3Z9m3Kaq/e35aKWMP52:l8kWzY2lhUBzV34eTjeBqG3t52

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      8d1058166d3845c6d3858d7dd080d95268356c95e3d64de6825c21a688a9fda4N.exe

    • Size

      440KB

    • MD5

      558a7b52e960079037b02363d58729c0

    • SHA1

      a692f6560cd0f6f1fc2b4e8aa4c3683c150af80a

    • SHA256

      8d1058166d3845c6d3858d7dd080d95268356c95e3d64de6825c21a688a9fda4

    • SHA512

      4def6b88e4a4a39478192c96abdd9521740cf9fef1c11716ef1b7ef38c60d40ff19e81d4d22c71ed934a2f20d51c22d9728fe72f9f65e9e67b926207b0a779b1

    • SSDEEP

      6144:eeTlgNrF2F8WgbDzY2JqMPhU+j4tzVZ1YrsldGcGg3Z9m3Kaq/e35aKWMP52:l8kWzY2lhUBzV34eTjeBqG3t52

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks