General

  • Target

    2025-01-11_340db55f34b850bbbc9fdb2f6cae0f61_frostygoop_poet-rat_snatch

  • Size

    5.0MB

  • Sample

    250111-mncc1szjcp

  • MD5

    340db55f34b850bbbc9fdb2f6cae0f61

  • SHA1

    6916202a66abc0bfb5134cea945adb55efcbf4d5

  • SHA256

    a6bca59637080944459d3c4b30d18e1f2c90330ab9b17b1518a657b8b6248fac

  • SHA512

    6fa78282d5978e1fafc48c46c5b2338c1c8eacb976bd310b36d295b4a9f2a3dd9197a99ba00d8b0eea928fb19e340fe57ff3a554916900e25cbedbdf971b500e

  • SSDEEP

    49152:fqb5ndxT3zwUJM+4Bsc3Zm2PWBj+97uZEQnXiyXy6GDXVMJIyRs30rnsu+HlP/bN:fqb5D/zW+4LEjBDn86tIy4Svj

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://robinsharez.shop/api

https://handscreamny.shop/api

https://chipdonkeruz.shop/api

https://versersleep.shop/api

https://crowdwarek.shop/api

https://apporholis.shop/api

https://femalsabler.shop/api

https://soundtappysk.shop/api

Targets

    • Target

      2025-01-11_340db55f34b850bbbc9fdb2f6cae0f61_frostygoop_poet-rat_snatch

    • Size

      5.0MB

    • MD5

      340db55f34b850bbbc9fdb2f6cae0f61

    • SHA1

      6916202a66abc0bfb5134cea945adb55efcbf4d5

    • SHA256

      a6bca59637080944459d3c4b30d18e1f2c90330ab9b17b1518a657b8b6248fac

    • SHA512

      6fa78282d5978e1fafc48c46c5b2338c1c8eacb976bd310b36d295b4a9f2a3dd9197a99ba00d8b0eea928fb19e340fe57ff3a554916900e25cbedbdf971b500e

    • SSDEEP

      49152:fqb5ndxT3zwUJM+4Bsc3Zm2PWBj+97uZEQnXiyXy6GDXVMJIyRs30rnsu+HlP/bN:fqb5D/zW+4LEjBDn86tIy4Svj

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks