General

  • Target

    2025-01-11_562c45276e88ad01c0fe1465c7797f14_frostygoop_poet-rat_snatch

  • Size

    13.4MB

  • Sample

    250111-nvgrra1lhm

  • MD5

    562c45276e88ad01c0fe1465c7797f14

  • SHA1

    2b6d738addaa03b48844d871488d244e9fa0c87e

  • SHA256

    1113d3961ac3de02d11d2c9d1b364104c4b3571540247564636619a16283bdcc

  • SHA512

    de6cde4f32acd5d716b6f7305fa0d86a6bccf88bc1626edc3162a05b4e8fb0aef55abe1c84036ab52a65f9419cf7603eb67e2cbae75ed09ddd07c028360c589e

  • SSDEEP

    98304:V0WtIDiu9RJgeQwqfoaq7szbjllr9W2jSPaXBlftIa44BCt:2WtnBwqNSPaXBlftIuBo

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://remakeveile.sbs/api

Targets

    • Target

      2025-01-11_562c45276e88ad01c0fe1465c7797f14_frostygoop_poet-rat_snatch

    • Size

      13.4MB

    • MD5

      562c45276e88ad01c0fe1465c7797f14

    • SHA1

      2b6d738addaa03b48844d871488d244e9fa0c87e

    • SHA256

      1113d3961ac3de02d11d2c9d1b364104c4b3571540247564636619a16283bdcc

    • SHA512

      de6cde4f32acd5d716b6f7305fa0d86a6bccf88bc1626edc3162a05b4e8fb0aef55abe1c84036ab52a65f9419cf7603eb67e2cbae75ed09ddd07c028360c589e

    • SSDEEP

      98304:V0WtIDiu9RJgeQwqfoaq7szbjllr9W2jSPaXBlftIa44BCt:2WtnBwqNSPaXBlftIuBo

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks