General

  • Target

    MDE_File_Sample_9b0fcdf44e0deaaea8ac045a268e7ddc98d5a101.zip

  • Size

    298KB

  • Sample

    250116-rkk8zatpgv

  • MD5

    7cd86bcbaefe62af32cebbefc5a37e04

  • SHA1

    31eb887abb6dcc035b8b3c1fb166bbe5450999ea

  • SHA256

    cb42390c2f309c26fdd5e47563233afc73fd866af234b9838626440ea62ce7e7

  • SHA512

    20633335cc29068c7e9e56e58edc30ce5c9619cb8d7e315612882075e94d30fce06c4e12f0608079d0d113e05c0184a95f519b29328b1695a67de8b0c9b2759e

  • SSDEEP

    6144:TPIAmVevkm1q93H3ug+J9ggDUGI7Jf6NJeRkZGfhErOyzk+4/wQSdvfE:TgAbE3HWJ9gSROf6Noe1ra+4/ydk

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://foreigoiru.cyou/api

Targets

    • Target

      MDE_File_Sample_9b0fcdf44e0deaaea8ac045a268e7ddc98d5a101.zip

    • Size

      298KB

    • MD5

      7cd86bcbaefe62af32cebbefc5a37e04

    • SHA1

      31eb887abb6dcc035b8b3c1fb166bbe5450999ea

    • SHA256

      cb42390c2f309c26fdd5e47563233afc73fd866af234b9838626440ea62ce7e7

    • SHA512

      20633335cc29068c7e9e56e58edc30ce5c9619cb8d7e315612882075e94d30fce06c4e12f0608079d0d113e05c0184a95f519b29328b1695a67de8b0c9b2759e

    • SSDEEP

      6144:TPIAmVevkm1q93H3ug+J9ggDUGI7Jf6NJeRkZGfhErOyzk+4/wQSdvfE:TgAbE3HWJ9gSROf6Noe1ra+4/ydk

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks