Overview

overview

10

Static

static

1

94c4bebfe9...7N.exe

windows7-x64

10

94c4bebfe9...7N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    94c4bebfe9dda0b8104305114d05c2bd31c48a226261b8e4223c9917a14a6bd7N.exe

  • Size

    549KB

  • Sample

    250112-mgdmhaylds

  • MD5

    908bc99f7b61841aaf055eb33cccf3c0

  • SHA1

    22cd25f8fdd966f01ba385fb6177550191b02776

  • SHA256

    94c4bebfe9dda0b8104305114d05c2bd31c48a226261b8e4223c9917a14a6bd7

  • SHA512

    a51feb1509d0d9d0b26ed6d1d826c0d8a193b961bdf3d2c37f7def777495f41cf5379ef6cd94c43ce26e25e67396a0bd2d7b5eab63ebb1a65e91fce65c3c979a

  • SSDEEP

    12288:9yssTHKT0KDvd3Ha8062GnuCo9ap83yEO:cTqT3Ld368062Qi9PCt

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://conceptionnyi.sbs/api

https://platformcati.sbs/api

https://nervepianoyo.sbs/api

https://qualifielgalt.sbs/api

https://smashygally.sbs/api

https://fightyglobo.sbs/api

https://modellydivi.sbs/api

https://pioneeruyj.sbs/api

https://underlinefiue.sbs/api

Extracted

Family

lumma

C2

https://platformcati.sbs/api

Targets

    • Target

      94c4bebfe9dda0b8104305114d05c2bd31c48a226261b8e4223c9917a14a6bd7N.exe

    • Size

      549KB

    • MD5

      908bc99f7b61841aaf055eb33cccf3c0

    • SHA1

      22cd25f8fdd966f01ba385fb6177550191b02776

    • SHA256

      94c4bebfe9dda0b8104305114d05c2bd31c48a226261b8e4223c9917a14a6bd7

    • SHA512

      a51feb1509d0d9d0b26ed6d1d826c0d8a193b961bdf3d2c37f7def777495f41cf5379ef6cd94c43ce26e25e67396a0bd2d7b5eab63ebb1a65e91fce65c3c979a

    • SSDEEP

      12288:9yssTHKT0KDvd3Ha8062GnuCo9ap83yEO:cTqT3Ld368062Qi9PCt

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks