General

  • Target

    178d8523fa6e5560f59e75acb4d76e4a99d91c7bbf232e02c8763d7f62712d0c

  • Size

    22.0MB

  • Sample

    250121-lp32paxqdj

  • MD5

    d65773e00afe7e10ed03b2833a7deb26

  • SHA1

    f02722374c03f1ae0eac7cab302b2df59a8dbeff

  • SHA256

    178d8523fa6e5560f59e75acb4d76e4a99d91c7bbf232e02c8763d7f62712d0c

  • SHA512

    2312254f17fe4cd6c48d2e1438695be7e330e19445bc51b3aff500298e0712a57f3ebcc184045105f9d1dfaee8df5062ad4119104fd71d03650d2f11f8134f5a

  • SSDEEP

    98304:w9JcxfRT6piRL+gy0aljqaGD6o8U954hk7DxI4zuDkdefaaSB+9r3l3ZC6IjhsAD:FkeDp8nhigDCBEr3lpCJhsA5NZxj

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://commisionipwn.shop/api

https://stitchmiscpaew.shop/api

https://ignoracndwko.shop/api

https://grassemenwji.shop/api

https://charistmatwio.shop/api

https://basedsymsotp.shop/api

https://complainnykso.shop/api

https://preachstrwnwjw.shop/api

Targets

    • Target

      178d8523fa6e5560f59e75acb4d76e4a99d91c7bbf232e02c8763d7f62712d0c

    • Size

      22.0MB

    • MD5

      d65773e00afe7e10ed03b2833a7deb26

    • SHA1

      f02722374c03f1ae0eac7cab302b2df59a8dbeff

    • SHA256

      178d8523fa6e5560f59e75acb4d76e4a99d91c7bbf232e02c8763d7f62712d0c

    • SHA512

      2312254f17fe4cd6c48d2e1438695be7e330e19445bc51b3aff500298e0712a57f3ebcc184045105f9d1dfaee8df5062ad4119104fd71d03650d2f11f8134f5a

    • SSDEEP

      98304:w9JcxfRT6piRL+gy0aljqaGD6o8U954hk7DxI4zuDkdefaaSB+9r3l3ZC6IjhsAD:FkeDp8nhigDCBEr3lpCJhsA5NZxj

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks