General

  • Target

    MDE_File_Sample_9b0fcdf44e0deaaea8ac045a268e7ddc98d5a101.zip

  • Size

    298KB

  • Sample

    250116-rt1p1svqhk

  • MD5

    7cd86bcbaefe62af32cebbefc5a37e04

  • SHA1

    31eb887abb6dcc035b8b3c1fb166bbe5450999ea

  • SHA256

    cb42390c2f309c26fdd5e47563233afc73fd866af234b9838626440ea62ce7e7

  • SHA512

    20633335cc29068c7e9e56e58edc30ce5c9619cb8d7e315612882075e94d30fce06c4e12f0608079d0d113e05c0184a95f519b29328b1695a67de8b0c9b2759e

  • SSDEEP

    6144:TPIAmVevkm1q93H3ug+J9ggDUGI7Jf6NJeRkZGfhErOyzk+4/wQSdvfE:TgAbE3HWJ9gSROf6Noe1ra+4/ydk

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://foreigoiru.cyou/api

Targets

    • Target

      soryte.exe

    • Size

      21KB

    • MD5

      094e3d100ff3b088c886b96b5ed47d25

    • SHA1

      c02bee1b4259c664b8ccbcf1376011349ba7e9c0

    • SHA256

      e666c48de937578c9cc65f6f36806691a33ee63b12339df27975a570f8bb1bbd

    • SHA512

      cdbace32e02be4e4d471e1c84b7011476631f304dcb3ebaa1a7068e34b7233bae43271fbfcde3b0ffb8964713756f68fcaa15f86d3f022be409dd4454a5ef7ea

    • SSDEEP

      384:d4ahjO5Q4UeGU0QOKt7Tz9q4kdenJaFCW:dfjytGaLkdC9W

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Target

      wincr.dll

    • Size

      971KB

    • MD5

      301110636d01147ed054b745f8f876f5

    • SHA1

      a24dbad0b7433e823ac3b5d3f5388e689a97388e

    • SHA256

      6e03be3d3a4c237e28f0245b93f11277185a69e28ffeb18f0791ea10c435fa98

    • SHA512

      30ba95ac58b2af4ed8ede34ba60ba3e834ebc4c00fbfcd176d5991309659736e132c616d93b0514712206b6da35944cec12720f3eaf0497f17c10b6fc47f712e

    • SSDEEP

      6144:YRjaR84dQvFsPxsgeRYej5B6T4FfKCnaBPlCPVLwKoCJVcfQfQvJW9h8FgZOTzNE:6den4FyEq8xo66zAU7EIt2HXZgwUT

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks