General

  • Target

    CheatInjector.exe

  • Size

    330KB

  • Sample

    250110-zqgrqszjfj

  • MD5

    60d75edd486ced6dc5e141150e237ae7

  • SHA1

    59e85f89a059e97bb84d81616b7dd7cecc88001d

  • SHA256

    50b63082315875ea18e044d14f315d1eccdf54002c9f2021a40b3eaeaedc323f

  • SHA512

    c6ab625334ab4ec20a9ed0e3b6cf1cd4b1c09d9b30fc2694c13dcae2bf17b99fbbdeafcedc0feb4eca3e6ba99e75f198b1c7ce23dc03be352879fbc190081e19

  • SSDEEP

    6144:76pCQYGy5n8funosMg5kFjfKC/6PRUt6Ct1f+8M3TKcHiE:76pCQ3yyfuosMg52fd/IRuM3TNl

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://fraggielek.biz/api

https://grandiouseziu.biz/api

https://littlenotii.biz/api

https://marketlumpe.biz/api

https://nuttyshopr.biz/api

https://punishzement.biz/api

https://spookycappy.biz/api

https://truculengisau.biz/api

Targets

    • Target

      CheatInjector.exe

    • Size

      330KB

    • MD5

      60d75edd486ced6dc5e141150e237ae7

    • SHA1

      59e85f89a059e97bb84d81616b7dd7cecc88001d

    • SHA256

      50b63082315875ea18e044d14f315d1eccdf54002c9f2021a40b3eaeaedc323f

    • SHA512

      c6ab625334ab4ec20a9ed0e3b6cf1cd4b1c09d9b30fc2694c13dcae2bf17b99fbbdeafcedc0feb4eca3e6ba99e75f198b1c7ce23dc03be352879fbc190081e19

    • SSDEEP

      6144:76pCQYGy5n8funosMg5kFjfKC/6PRUt6Ct1f+8M3TKcHiE:76pCQ3yyfuosMg52fd/IRuM3TNl

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks