General

  • Target

    installer_1.05_37.7.exe

  • Size

    1.1MB

  • Sample

    250118-31x39azmap

  • MD5

    f32e38ba72ea905c85f334c46e29a395

  • SHA1

    7ac493eaaa906da24168edc015ea8223563c7e09

  • SHA256

    13d366678ecc0f497d38614b0f29d387e013b8b36bea5aafeb70b7dcc0f35d8c

  • SHA512

    7e1cdf166f1798444a4cff5d47c0c2dcc402ef0d1a34be705222457c355c268cca60caf988be2bfb02066744053b02d6fae0ff977a07f145942d57587d31986b

  • SSDEEP

    24576:l8OBhWF0n7c7GtMTNWkMxOFfcpdvcPi47BkleE/2SCYT41nNzJnVJ6v5kHb7Tb7j:VT72GeTU80pZcq47JE+lzNzJ6S

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://craveinjuur.shop/api

Targets

    • Target

      installer_1.05_37.7.exe

    • Size

      1.1MB

    • MD5

      f32e38ba72ea905c85f334c46e29a395

    • SHA1

      7ac493eaaa906da24168edc015ea8223563c7e09

    • SHA256

      13d366678ecc0f497d38614b0f29d387e013b8b36bea5aafeb70b7dcc0f35d8c

    • SHA512

      7e1cdf166f1798444a4cff5d47c0c2dcc402ef0d1a34be705222457c355c268cca60caf988be2bfb02066744053b02d6fae0ff977a07f145942d57587d31986b

    • SSDEEP

      24576:l8OBhWF0n7c7GtMTNWkMxOFfcpdvcPi47BkleE/2SCYT41nNzJnVJ6v5kHb7Tb7j:VT72GeTU80pZcq47JE+lzNzJ6S

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks