General

  • Target

    EcheIon.zip

  • Size

    56.1MB

  • Sample

    250113-q4qr5atqes

  • MD5

    52ccdaefd042307bbd1b2f53155aabc2

  • SHA1

    675a7321f6f3291352926eaa550711d9cc71f6b0

  • SHA256

    8cdbf4c71eccc7065c76b28cae6df27e3967d9c660852399af837735a0060d69

  • SHA512

    2b0bb561619c520c97a5cf9b16aaefa402af2a69a56d77562478847443aafa4aa0312555290d6d7a14e4d31cb35e03ab8ef7148fa4d7ecfd8dd02f3db70b9940

  • SSDEEP

    1572864:R3i5dzVOsoNxmP6E7IALTK/D0Y0TBIH3adpnkK5zWuiK1:RS5dzcNgyzAi/DyTBwODl/iK1

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      EcheIon.zip

    • Size

      56.1MB

    • MD5

      52ccdaefd042307bbd1b2f53155aabc2

    • SHA1

      675a7321f6f3291352926eaa550711d9cc71f6b0

    • SHA256

      8cdbf4c71eccc7065c76b28cae6df27e3967d9c660852399af837735a0060d69

    • SHA512

      2b0bb561619c520c97a5cf9b16aaefa402af2a69a56d77562478847443aafa4aa0312555290d6d7a14e4d31cb35e03ab8ef7148fa4d7ecfd8dd02f3db70b9940

    • SSDEEP

      1572864:R3i5dzVOsoNxmP6E7IALTK/D0Y0TBIH3adpnkK5zWuiK1:RS5dzcNgyzAi/DyTBwODl/iK1

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks