General

  • Target

    6c78b7528af440692f9988d13232928eb99531ce1c3712574db8581175072f13.exe

  • Size

    2.8MB

  • Sample

    250112-b7x82ssnel

  • MD5

    e4bff8364a1126dc3b127cb53a5980dc

  • SHA1

    ddf68e826dab44c23fd5933685b7cf3b6926edab

  • SHA256

    6c78b7528af440692f9988d13232928eb99531ce1c3712574db8581175072f13

  • SHA512

    8fe6b93c6721cfd938904116f3ccf62b602497fc85405a7ab84b8e7110978b319b39e3311acded7846ee50bb24a7ca7452f8b021e7da1d146f68d3107a2ad632

  • SSDEEP

    49152:cEXbF1lsHy/7iWpFhuNT5boQb6cZ0ESOGzim6Te7uBRHu17wahjP8yiIxNBqoovv:DF1lscx0yiANQofw

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      6c78b7528af440692f9988d13232928eb99531ce1c3712574db8581175072f13.exe

    • Size

      2.8MB

    • MD5

      e4bff8364a1126dc3b127cb53a5980dc

    • SHA1

      ddf68e826dab44c23fd5933685b7cf3b6926edab

    • SHA256

      6c78b7528af440692f9988d13232928eb99531ce1c3712574db8581175072f13

    • SHA512

      8fe6b93c6721cfd938904116f3ccf62b602497fc85405a7ab84b8e7110978b319b39e3311acded7846ee50bb24a7ca7452f8b021e7da1d146f68d3107a2ad632

    • SSDEEP

      49152:cEXbF1lsHy/7iWpFhuNT5boQb6cZ0ESOGzim6Te7uBRHu17wahjP8yiIxNBqoovv:DF1lscx0yiANQofw

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Blocklisted process makes network request

MITRE ATT&CK Enterprise v15

Tasks