General

  • Target

    6355617c6daf6eac8ebe2c0111401c31f280122edf9ca53ee446e901f5717681.exe

  • Size

    358KB

  • Sample

    250111-wx5klavrcw

  • MD5

    3f2dd9eb250b734e3902266353edf1f0

  • SHA1

    a2f00861f6b313504714447687ed142a83e297ea

  • SHA256

    6355617c6daf6eac8ebe2c0111401c31f280122edf9ca53ee446e901f5717681

  • SHA512

    7b6c7e2c5e00e41194ebfbd49e15310bdead33e0dabd6c12fc716f1d3761f9e26fd9fdfc8cf41d194783e45cb98416801b6eb2b3775002099505ca23b3c7d2e4

  • SSDEEP

    6144:h9XhFJ2ZJUzLhX+oRdfvl/HxkU++Ql36XMMs7cVRK85xm9tGRDytvl6D5wlWAVY:3rJsJUzLhJ3l/RkU+b3lAVDgTGROtt6p

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://fancywaxxers.shop/api

Targets

    • Target

      6355617c6daf6eac8ebe2c0111401c31f280122edf9ca53ee446e901f5717681.exe

    • Size

      358KB

    • MD5

      3f2dd9eb250b734e3902266353edf1f0

    • SHA1

      a2f00861f6b313504714447687ed142a83e297ea

    • SHA256

      6355617c6daf6eac8ebe2c0111401c31f280122edf9ca53ee446e901f5717681

    • SHA512

      7b6c7e2c5e00e41194ebfbd49e15310bdead33e0dabd6c12fc716f1d3761f9e26fd9fdfc8cf41d194783e45cb98416801b6eb2b3775002099505ca23b3c7d2e4

    • SSDEEP

      6144:h9XhFJ2ZJUzLhX+oRdfvl/HxkU++Ql36XMMs7cVRK85xm9tGRDytvl6D5wlWAVY:3rJsJUzLhJ3l/RkU+b3lAVDgTGROtt6p

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks