General

  • Target

    lumma_phothockey.exe

  • Size

    205KB

  • Sample

    250114-r6qeta1jgz

  • MD5

    78bd1dff11c56a3138f78ff061c34d5a

  • SHA1

    9ba8bbac951b07a3fd64729631fe387e0473f10e

  • SHA256

    18f3749e057ca1d3899cb27c94dac6394e3716ab46be15e98594865e74b779bd

  • SHA512

    d992d46ef28acc8b36c306ce7610fc64142e2ebaac1ce84bdbb1d6dec63868f69e5e0c8929fe2f04b201999e3d4765545b5277566f0a678b86a67be0e29c52d3

  • SSDEEP

    3072:EIfZSq/gPyaii68Ffi7mgN+bI8J1HUYXYxA2vIDaeHrtsC2hdRib1:EmN8umL88J10YXYxA2grrtF2Zi

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://burnressert.shop/api

Targets

    • Target

      lumma_phothockey.exe

    • Size

      205KB

    • MD5

      78bd1dff11c56a3138f78ff061c34d5a

    • SHA1

      9ba8bbac951b07a3fd64729631fe387e0473f10e

    • SHA256

      18f3749e057ca1d3899cb27c94dac6394e3716ab46be15e98594865e74b779bd

    • SHA512

      d992d46ef28acc8b36c306ce7610fc64142e2ebaac1ce84bdbb1d6dec63868f69e5e0c8929fe2f04b201999e3d4765545b5277566f0a678b86a67be0e29c52d3

    • SSDEEP

      3072:EIfZSq/gPyaii68Ffi7mgN+bI8J1HUYXYxA2vIDaeHrtsC2hdRib1:EmN8umL88J10YXYxA2grrtF2Zi

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.