General

  • Target

    9379a83018a3ac13ad0224b0576027c85b70b4a6a1cf7c94abda18ad2b27ca04.exe

  • Size

    341KB

  • Sample

    250118-favtwasrgy

  • MD5

    ce015daac1dc613cabd733e4b34da9da

  • SHA1

    d0aff1ab9deb612c3c421af69c539815144e965c

  • SHA256

    9379a83018a3ac13ad0224b0576027c85b70b4a6a1cf7c94abda18ad2b27ca04

  • SHA512

    dff780309c4449d3f81f3580a5acde573ba11eb4d120604994a880a016a9a3a00d32cf36f58946c940b0dec0c03d6d6544e6c78e70f71a38e076841053df953c

  • SSDEEP

    6144:AT1Bgj04zLS/70E7IodJ6vsVzsooEAPmIV49g2/GzrtXAlGSwxj76f:Gb45zA7Fv6vsVOzm9t/Gzr9AsNP6f

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      9379a83018a3ac13ad0224b0576027c85b70b4a6a1cf7c94abda18ad2b27ca04.exe

    • Size

      341KB

    • MD5

      ce015daac1dc613cabd733e4b34da9da

    • SHA1

      d0aff1ab9deb612c3c421af69c539815144e965c

    • SHA256

      9379a83018a3ac13ad0224b0576027c85b70b4a6a1cf7c94abda18ad2b27ca04

    • SHA512

      dff780309c4449d3f81f3580a5acde573ba11eb4d120604994a880a016a9a3a00d32cf36f58946c940b0dec0c03d6d6544e6c78e70f71a38e076841053df953c

    • SSDEEP

      6144:AT1Bgj04zLS/70E7IodJ6vsVzsooEAPmIV49g2/GzrtXAlGSwxj76f:Gb45zA7Fv6vsVOzm9t/Gzr9AsNP6f

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks