General

  • Target

    8022fb95a65080a64ea7126f4a732406a935942f62561a7d9350442a60434625

  • Size

    100.1MB

  • Sample

    250121-lyck4axpct

  • MD5

    b2e00833e1372c54a245e3f86af11810

  • SHA1

    c35323a43bc90debdaa37a667e240660ca317b03

  • SHA256

    8022fb95a65080a64ea7126f4a732406a935942f62561a7d9350442a60434625

  • SHA512

    a1a58e8fc03612ca64e9acbe164f01a02ef00e279f32957bffcf207b41e1378d57ac3808150a7fb27117c7d1f07c94951f41009276e378b2f32eea37178bb374

  • SSDEEP

    786432:fvozZO4xYT92AapCj9gfVi5YZTZwZzQYOih4:fw1O4Kx2A6CWi5

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://caffegclasiqwp.shop/api

https://stamppreewntnq.shop/api

https://stagedchheiqwo.shop/api

https://millyscroqwp.shop/api

https://evoliutwoqm.shop/api

https://condedqpwqm.shop/api

https://traineiwnqo.shop/api

https://locatedblsoqp.shop/api

https://froytnewqowv.shop/api

Targets

    • Target

      8022fb95a65080a64ea7126f4a732406a935942f62561a7d9350442a60434625

    • Size

      100.1MB

    • MD5

      b2e00833e1372c54a245e3f86af11810

    • SHA1

      c35323a43bc90debdaa37a667e240660ca317b03

    • SHA256

      8022fb95a65080a64ea7126f4a732406a935942f62561a7d9350442a60434625

    • SHA512

      a1a58e8fc03612ca64e9acbe164f01a02ef00e279f32957bffcf207b41e1378d57ac3808150a7fb27117c7d1f07c94951f41009276e378b2f32eea37178bb374

    • SSDEEP

      786432:fvozZO4xYT92AapCj9gfVi5YZTZwZzQYOih4:fw1O4Kx2A6CWi5

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks