Resubmissions

11-01-2025 19:28

250111-x63m2axjdw 10

General

  • Target

    NewSetup.7z

  • Size

    133.1MB

  • Sample

    250111-x63m2axjdw

  • MD5

    b685a3a0cb3c608c26f745701ea2aec4

  • SHA1

    105238e6e2ea6ddb46812583cf493f60b99722e2

  • SHA256

    7237c1f01b83342db06fae7e57e574d3566a2cea0f7af7137e12ad2dccd3ebe0

  • SHA512

    565e0d02bad12b195c5adea09faf77a8722ea76f447a22d41f723190a9960cb9315c39a7d92993ac410385b34d8082c8283dd9c5a78f549b2de8563fc4fe01c0

  • SSDEEP

    3145728:/iVGs+TQrpPM+Ec59g2fKFDYazxMbzT6l/cIZorVpo8:/wVlM+E0KFDYazxEeieoBR

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      NewSetup.7z

    • Size

      133.1MB

    • MD5

      b685a3a0cb3c608c26f745701ea2aec4

    • SHA1

      105238e6e2ea6ddb46812583cf493f60b99722e2

    • SHA256

      7237c1f01b83342db06fae7e57e574d3566a2cea0f7af7137e12ad2dccd3ebe0

    • SHA512

      565e0d02bad12b195c5adea09faf77a8722ea76f447a22d41f723190a9960cb9315c39a7d92993ac410385b34d8082c8283dd9c5a78f549b2de8563fc4fe01c0

    • SSDEEP

      3145728:/iVGs+TQrpPM+Ec59g2fKFDYazxMbzT6l/cIZorVpo8:/wVlM+E0KFDYazxEeieoBR

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks