General

  • Target

    2025-01-12_631f4845aaf0f5080955e0e5ff1fa848_frostygoop_poet-rat_snatch

  • Size

    5.4MB

  • Sample

    250112-bzy6dasjgj

  • MD5

    631f4845aaf0f5080955e0e5ff1fa848

  • SHA1

    c64e664b165a68fcd605df1c3d07f1697a6ce06f

  • SHA256

    ab7044f01c332567029ab4065c812b980dc4d81cf7191fb9ec00d01dd0cab234

  • SHA512

    185cc5e6ec85f523d1cfb535d955658580b88fe434671c212a26dd2f1e363e20937315fcad7763702ec9a702ed46c8fab12d97e37d61f104c3ffa2f533be2629

  • SSDEEP

    49152:LArMgX9DQQrb++BsxgV3/Heloza6wYFANYw2Oa2cgNDZAY4g+WWC0x1a:LArMo1++OGVrzqZ1lWU

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://robinsharez.shop/api

https://handscreamny.shop/api

https://chipdonkeruz.shop/api

https://versersleep.shop/api

https://crowdwarek.shop/api

https://apporholis.shop/api

https://femalsabler.shop/api

https://soundtappysk.shop/api

https://bashusolici.sbs/api

Targets

    • Target

      2025-01-12_631f4845aaf0f5080955e0e5ff1fa848_frostygoop_poet-rat_snatch

    • Size

      5.4MB

    • MD5

      631f4845aaf0f5080955e0e5ff1fa848

    • SHA1

      c64e664b165a68fcd605df1c3d07f1697a6ce06f

    • SHA256

      ab7044f01c332567029ab4065c812b980dc4d81cf7191fb9ec00d01dd0cab234

    • SHA512

      185cc5e6ec85f523d1cfb535d955658580b88fe434671c212a26dd2f1e363e20937315fcad7763702ec9a702ed46c8fab12d97e37d61f104c3ffa2f533be2629

    • SSDEEP

      49152:LArMgX9DQQrb++BsxgV3/Heloza6wYFANYw2Oa2cgNDZAY4g+WWC0x1a:LArMo1++OGVrzqZ1lWU

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks