General

  • Target

    Loader.exe

  • Size

    1.0MB

  • Sample

    250113-b5x59szkc1

  • MD5

    87728a355bdc7e8f4694e7050f2767d0

  • SHA1

    600f6d3a26927b7a6c0f7bf51dabeda5216b2a6e

  • SHA256

    88e641d524e8d73968100a7ad06644330c487a038f564d4e619b2baad1c6975c

  • SHA512

    6ec45eecfa8117d7713b9f2f0ed8d2c969fc5d4796c57cb98e3bcc0c870d9a795bd682a867eb3b46ae6dcbfa5834ab1bf11e95800e91d0f200b69f424f9c7e97

  • SSDEEP

    24576:DAuugBY2lTVCj2gk4ZOpl3pV9oN86SIcRAsBwZwJIPboTNrcr7Z6p:AyX34ZOf3pV9SpS7R3BwZwJ8kray

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://sailstrangej.cyou/api

Targets

    • Target

      Loader.exe

    • Size

      1.0MB

    • MD5

      87728a355bdc7e8f4694e7050f2767d0

    • SHA1

      600f6d3a26927b7a6c0f7bf51dabeda5216b2a6e

    • SHA256

      88e641d524e8d73968100a7ad06644330c487a038f564d4e619b2baad1c6975c

    • SHA512

      6ec45eecfa8117d7713b9f2f0ed8d2c969fc5d4796c57cb98e3bcc0c870d9a795bd682a867eb3b46ae6dcbfa5834ab1bf11e95800e91d0f200b69f424f9c7e97

    • SSDEEP

      24576:DAuugBY2lTVCj2gk4ZOpl3pV9oN86SIcRAsBwZwJIPboTNrcr7Z6p:AyX34ZOf3pV9SpS7R3BwZwJ8kray

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks