General

  • Target

    collapse.space.zip

  • Size

    46.9MB

  • Sample

    250121-1d3zwa1qgw

  • MD5

    d3aef4cc6b720226773cf5780cc16bee

  • SHA1

    4f7ffca4353d2eb214d7c34b6722f545864263a3

  • SHA256

    c073f7342adeff3ddc1335e76377d8042daf667f4f677e037c0a97157d469524

  • SHA512

    3981c757e9a7c470c70af5acc55d9fd9201ee70eb9eb98c1fe6e896dfc3a1a96633bb8e4c49f78668e3e5f48e2b24d468b475d783ae3a01f738359536ec78e84

  • SSDEEP

    786432:s4vnw0phQU2sIi5N4ks6DW+npKpHqARNOYVqcP2JZfCs+CdjJcCGznFc01WtZ:znZMsc+DDpKKA3OpcOnzjHGzFk/

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cultureddirtys.click/api

https://suggestyuoz.biz/api

Targets

    • Target

      collapse.space.zip

    • Size

      46.9MB

    • MD5

      d3aef4cc6b720226773cf5780cc16bee

    • SHA1

      4f7ffca4353d2eb214d7c34b6722f545864263a3

    • SHA256

      c073f7342adeff3ddc1335e76377d8042daf667f4f677e037c0a97157d469524

    • SHA512

      3981c757e9a7c470c70af5acc55d9fd9201ee70eb9eb98c1fe6e896dfc3a1a96633bb8e4c49f78668e3e5f48e2b24d468b475d783ae3a01f738359536ec78e84

    • SSDEEP

      786432:s4vnw0phQU2sIi5N4ks6DW+npKpHqARNOYVqcP2JZfCs+CdjJcCGznFc01WtZ:znZMsc+DDpKKA3OpcOnzjHGzFk/

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks