General

  • Target

    571bf1dbfe3559667c624637aa46988addab550a18620339d9a12ebb5e1655e0N.exe

  • Size

    854KB

  • Sample

    250111-3dtgjsvjcz

  • MD5

    feffb099a72c270921f3a1303c333350

  • SHA1

    26fddc7cc840f82815aa53a4dc0e5ef34f84d869

  • SHA256

    571bf1dbfe3559667c624637aa46988addab550a18620339d9a12ebb5e1655e0

  • SHA512

    2b02fff6d3b721223a0a3c039e95b4a3edd6107b8d115b7bfa1c11800e205041ce4d82c810a8ae4c09c87634a1bfca975c46f48e4ea809782de33193ad977d58

  • SSDEEP

    12288:UMdJ3PbJJdQjiT+93I2uo204MX5CXg0mhjG9upNLtNAYOCVKQggz8Sp75dg9ML+C:UMreOaVI2uHFms+LzbKWzC9R

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://fancywaxxers.shop/api

Targets

    • Target

      571bf1dbfe3559667c624637aa46988addab550a18620339d9a12ebb5e1655e0N.exe

    • Size

      854KB

    • MD5

      feffb099a72c270921f3a1303c333350

    • SHA1

      26fddc7cc840f82815aa53a4dc0e5ef34f84d869

    • SHA256

      571bf1dbfe3559667c624637aa46988addab550a18620339d9a12ebb5e1655e0

    • SHA512

      2b02fff6d3b721223a0a3c039e95b4a3edd6107b8d115b7bfa1c11800e205041ce4d82c810a8ae4c09c87634a1bfca975c46f48e4ea809782de33193ad977d58

    • SSDEEP

      12288:UMdJ3PbJJdQjiT+93I2uo204MX5CXg0mhjG9upNLtNAYOCVKQggz8Sp75dg9ML+C:UMreOaVI2uHFms+LzbKWzC9R

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks