Resubmissions

17-01-2025 20:24

250117-y666wssndk 10

17-01-2025 20:21

250117-y5afjasmgl 10

General

  • Target

    e-Set_p--1703__Pw0D.exe

  • Size

    1.1MB

  • Sample

    250117-y5afjasmgl

  • MD5

    d8a270a7b3c65bbb9c7785376bd34a32

  • SHA1

    aa101df90a0aeb746b02f4524a6dd79e51fa8bae

  • SHA256

    5a05d9d4214105d12cf589ee98235c0f8641909d1f0ed2cdf5319c4fb8968b2c

  • SHA512

    4c287059096912f858a6c5f3fb789a47bdea15467320df1616a65f2024319dc8cb0059b468f7c72be96dc75846567f5590ddf2ae450ae4f2a14e2dc9d5e6b4ba

  • SSDEEP

    24576:gd/9LQn0dBy/AoV/4SJptaWDqiFaYQsxo+cZHgBxhu03w3:M1LB6/HbaNybQsxo3Hmnu03w3

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://mshyhennyk.cyou/api

Targets

    • Target

      e-Set_p--1703__Pw0D.exe

    • Size

      1.1MB

    • MD5

      d8a270a7b3c65bbb9c7785376bd34a32

    • SHA1

      aa101df90a0aeb746b02f4524a6dd79e51fa8bae

    • SHA256

      5a05d9d4214105d12cf589ee98235c0f8641909d1f0ed2cdf5319c4fb8968b2c

    • SHA512

      4c287059096912f858a6c5f3fb789a47bdea15467320df1616a65f2024319dc8cb0059b468f7c72be96dc75846567f5590ddf2ae450ae4f2a14e2dc9d5e6b4ba

    • SSDEEP

      24576:gd/9LQn0dBy/AoV/4SJptaWDqiFaYQsxo+cZHgBxhu03w3:M1LB6/HbaNybQsxo3Hmnu03w3

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks