General

  • Target

    95026d847b8c958f4898ec5d33d70c541f892ed2179e92f1f6f7208ffc90aeaa.zip

  • Size

    11.3MB

  • Sample

    250118-fa6ldatnhm

  • MD5

    bde7921caf5f63bfb0d3feb4f9108c77

  • SHA1

    e4f7e48296541ed693f842e94c2dba6929d29ff9

  • SHA256

    95026d847b8c958f4898ec5d33d70c541f892ed2179e92f1f6f7208ffc90aeaa

  • SHA512

    9d53444a1f49a557d3f976d4fabd06c3fc543469b3769bb8ed669a244e059932dadb54cb92c784704b9b1f43611b08daab48402fb763a5be384ee731a6a3a06a

  • SSDEEP

    196608:KVi8XIYDz/6VcCjNg/fTqlOD3DI+M12kkzJ+lxaIhcCigf2NEBwt:ai8YHVcCpuTuQ3DI+O7tlxDRfcEBwt

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://whitebeauti.shop/api

Targets

    • Target

      manga maker comipo v2.30.02 crack/manga maker comipo v2.30.02 crack.exe

    • Size

      850.2MB

    • MD5

      2e29a4b74e9d54575d4851e7dd56d1b2

    • SHA1

      feadf0c6967e7d87e3ca914f35329a91771b2994

    • SHA256

      99eef211c62380247eb1a5dda1fa223747a94f36d8398858502e01d352dc744f

    • SHA512

      01fca658b6291da8604fd2667e24cb089911cb002484645f1cf23201e59baefa21e5361073dffcd5a11b6166440821dc1046f22cc47a0d56507cbd32e82f23fd

    • SSDEEP

      393216:8CQi4dj/SnmGgs+3wNwOtp+0/uNV4XiPi39hXBmz73sPK:8

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks