General

  • Target

    GalaxyPr00j33ct2.53v (3393).zip

  • Size

    1014KB

  • Sample

    250113-evnevsxrbl

  • MD5

    d314df5322f4e34451dd4dcb77dd228c

  • SHA1

    f412bee4162afc2100e0210039facc80c13ae8a3

  • SHA256

    d04319638121fae743c3f0f3fbf64c4e06516fedbe14091f7ff52fc1d72ae1ba

  • SHA512

    8c63a5660af5c9febfda58b2f487144e84b2d3bc77abeb9e990adc9e193e4b009476b1bb9ed91f6e4de3e7bb997caf2881ddf496648de6110c4d0b6f171f43e8

  • SSDEEP

    24576:4nGfz+eJr/z87RdWsLxfI+A+xKfkVFZk/1BrIUXH6:4Azhr/zsHtI+RVo/jsUXa

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://sailstrangej.cyou/api

Targets

    • Target

      Loader.exe

    • Size

      1.0MB

    • MD5

      87728a355bdc7e8f4694e7050f2767d0

    • SHA1

      600f6d3a26927b7a6c0f7bf51dabeda5216b2a6e

    • SHA256

      88e641d524e8d73968100a7ad06644330c487a038f564d4e619b2baad1c6975c

    • SHA512

      6ec45eecfa8117d7713b9f2f0ed8d2c969fc5d4796c57cb98e3bcc0c870d9a795bd682a867eb3b46ae6dcbfa5834ab1bf11e95800e91d0f200b69f424f9c7e97

    • SSDEEP

      24576:DAuugBY2lTVCj2gk4ZOpl3pV9oN86SIcRAsBwZwJIPboTNrcr7Z6p:AyX34ZOf3pV9SpS7R3BwZwJ8kray

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks