General

  • Target

    Launcher_v1.4.9.9.zip

  • Size

    3.7MB

  • Sample

    250118-alnl2sxmdw

  • MD5

    dfdc538af7b3a8dc317b9b50b17bf423

  • SHA1

    6da6ff1cd6f46df9ae09cf6b4cfa4c88fceefef9

  • SHA256

    db1ac1bbba4f280c0ca239bba2755dafe72d050d9e5d56a577ee0a7660fc6ced

  • SHA512

    84615e07412c7765fa6169ec4538be739da065405ed2f714888e767a252ab122ada4949f02f6b6b147047006aa749ea045ccbfe8bf20ef5a3c6314ae090208f9

  • SSDEEP

    98304:u71Rr0JbetMI2xgGallTTs9z3fw57FKhy6nZyQXmbtMAdczX:41x0JbetM5Cxls9ja7FKh3cd0

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://conformfucdioz.shop/api

https://bindceasdiwozx.shop/api

https://contemplateodszsv.shop/api

https://arriveoxpzxo.shop/api

https://catchddkxozvp.shop/api

https://declaredczxi.shop/api

https://replacedoxcjzp.shop/api

https://applyzxcksdia.shop/api

https://demandlinzei.shop/api

Targets

    • Target

      Launcher_v1.4.9.9.zip

    • Size

      3.7MB

    • MD5

      dfdc538af7b3a8dc317b9b50b17bf423

    • SHA1

      6da6ff1cd6f46df9ae09cf6b4cfa4c88fceefef9

    • SHA256

      db1ac1bbba4f280c0ca239bba2755dafe72d050d9e5d56a577ee0a7660fc6ced

    • SHA512

      84615e07412c7765fa6169ec4538be739da065405ed2f714888e767a252ab122ada4949f02f6b6b147047006aa749ea045ccbfe8bf20ef5a3c6314ae090208f9

    • SSDEEP

      98304:u71Rr0JbetMI2xgGallTTs9z3fw57FKhy6nZyQXmbtMAdczX:41x0JbetM5Cxls9ja7FKh3cd0

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks