General

  • Target

    Setup.exe

  • Size

    1.1MB

  • Sample

    250117-rtkc2aslgj

  • MD5

    f702a4af66cf6f8d69abc7d6815c868a

  • SHA1

    e08ea143335718aa416edef9d1cb0b7e91561377

  • SHA256

    437f9b11af79677b2298f5b8430f542634d5b963193d0791654d3f9af55dbcc8

  • SHA512

    3882a83604940d4f0dd5cee4e4d7156425a81ec274d88fb3d1e6167962a1c913a615fc2002ad911d5c5f6b24b013eee9c22b2767c021c9249a9bb59fe83d58bd

  • SSDEEP

    24576:FEtjUoHCP3lNgl+JNY6iNk8S4o3IAMawhrdZyXDpA3P:+SoH83lal+mNk8Sj4AwxMTpOP

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://twigbestug.shop/api

Targets

    • Target

      Setup.exe

    • Size

      1.1MB

    • MD5

      f702a4af66cf6f8d69abc7d6815c868a

    • SHA1

      e08ea143335718aa416edef9d1cb0b7e91561377

    • SHA256

      437f9b11af79677b2298f5b8430f542634d5b963193d0791654d3f9af55dbcc8

    • SHA512

      3882a83604940d4f0dd5cee4e4d7156425a81ec274d88fb3d1e6167962a1c913a615fc2002ad911d5c5f6b24b013eee9c22b2767c021c9249a9bb59fe83d58bd

    • SSDEEP

      24576:FEtjUoHCP3lNgl+JNY6iNk8S4o3IAMawhrdZyXDpA3P:+SoH83lal+mNk8Sj4AwxMTpOP

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks