General

  • Target

    Sonic the Hedgehog 3 2024.HD.1080p.x264.Dual.YG.exe

  • Size

    867.0MB

  • Sample

    250118-f9ea6svpem

  • MD5

    de044663ff36794737636cfb31587747

  • SHA1

    80c85d3d4757bc7e45f9b6f7ab8e5c035912f307

  • SHA256

    0f0dcfe29d973d636c6f321c37221fadc5ad8fa0d8c35f6ca82172a823184217

  • SHA512

    c7967247886699da493b3480e9f8bf9c8ed85a94c71b3452b6379a7ddbf1108cd6172f6a176edeac3d0aa4cb90325fd9b750f448c440ef6d6d798ee7e9bcf84a

  • SSDEEP

    24576:oAeGulPbyN7o8yjfiytX58PjDbZXU2mhf/zkk15rijl5KvGTLm:Fjc4olfie2DBmJB2zK5

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      Sonic the Hedgehog 3 2024.HD.1080p.x264.Dual.YG.exe

    • Size

      867.0MB

    • MD5

      de044663ff36794737636cfb31587747

    • SHA1

      80c85d3d4757bc7e45f9b6f7ab8e5c035912f307

    • SHA256

      0f0dcfe29d973d636c6f321c37221fadc5ad8fa0d8c35f6ca82172a823184217

    • SHA512

      c7967247886699da493b3480e9f8bf9c8ed85a94c71b3452b6379a7ddbf1108cd6172f6a176edeac3d0aa4cb90325fd9b750f448c440ef6d6d798ee7e9bcf84a

    • SSDEEP

      24576:oAeGulPbyN7o8yjfiytX58PjDbZXU2mhf/zkk15rijl5KvGTLm:Fjc4olfie2DBmJB2zK5

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Drops startup file

    • Executes dropped EXE

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks