Resubmissions

12-01-2025 13:38

250112-qxcxpatrew 10

12-01-2025 12:12

250112-pde29strbq 10

General

  • Target

    Loader.exe

  • Size

    489KB

  • Sample

    250112-qxcxpatrew

  • MD5

    d685ae29670dbc00b6665b5511bda6cb

  • SHA1

    2f49b83a6d7a5f9e5151c6f7f1b3fa9e6f4b25a9

  • SHA256

    0518c095cc948ab003cd4d12a1f95f0579c52c17f9102976b5799cd0bd85e6a2

  • SHA512

    d7705fcd8751a49cc17962ac9b6e228f55ef74aab066cabdd5de74518686feaea951487a042683ea3e055ce04e0b971b528572aac920f325fcf64d34167450de

  • SSDEEP

    12288:uiNSSLq47oIkbTUINbTDw7j/puQ/FU5A8e2CI582g/c10/nGZj:uicGq47oDwgbTDGjxJ/2i8MI

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      Loader.exe

    • Size

      489KB

    • MD5

      d685ae29670dbc00b6665b5511bda6cb

    • SHA1

      2f49b83a6d7a5f9e5151c6f7f1b3fa9e6f4b25a9

    • SHA256

      0518c095cc948ab003cd4d12a1f95f0579c52c17f9102976b5799cd0bd85e6a2

    • SHA512

      d7705fcd8751a49cc17962ac9b6e228f55ef74aab066cabdd5de74518686feaea951487a042683ea3e055ce04e0b971b528572aac920f325fcf64d34167450de

    • SSDEEP

      12288:uiNSSLq47oIkbTUINbTDw7j/puQ/FU5A8e2CI582g/c10/nGZj:uicGq47oDwgbTDGjxJ/2i8MI

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks