General

  • Target

    appFile.exe

  • Size

    840.2MB

  • Sample

    250122-1f89nsxpaj

  • MD5

    7dd0d3444b537ef8704c5ac73b563fbb

  • SHA1

    74f340b5eebef348ad0e3d3edd366302db6ac51f

  • SHA256

    82d57c41a165dc862edba9cc2e99bddce7dcb1301aa38f84d2fbf50015f06a63

  • SHA512

    d507ca19a60fd52c981f0bd175acec29003237bfe7df08e921b1a44981f4d1c404a61108d280783edf845eaffdc409210e269944f0977a8514f0cf87f4b37a67

  • SSDEEP

    393216:ECkCJ5qb7gZO3Cpmyv6oXhZNgzYv7JjeN5uw72nLapUbzTntpHS:+NgZOSCC1TJjm/UjHS

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://impolitewearr.biz/api

https://toppyneedus.biz/api

https://lightdeerysua.biz/api

https://suggestyuoz.biz/api

https://hoursuhouy.biz/api

https://mixedrecipew.biz/api

https://affordtempyo.biz/api

https://pleasedcfrown.biz/api

Targets

    • Target

      appFile.exe

    • Size

      840.2MB

    • MD5

      7dd0d3444b537ef8704c5ac73b563fbb

    • SHA1

      74f340b5eebef348ad0e3d3edd366302db6ac51f

    • SHA256

      82d57c41a165dc862edba9cc2e99bddce7dcb1301aa38f84d2fbf50015f06a63

    • SHA512

      d507ca19a60fd52c981f0bd175acec29003237bfe7df08e921b1a44981f4d1c404a61108d280783edf845eaffdc409210e269944f0977a8514f0cf87f4b37a67

    • SSDEEP

      393216:ECkCJ5qb7gZO3Cpmyv6oXhZNgzYv7JjeN5uw72nLapUbzTntpHS:+NgZOSCC1TJjm/UjHS

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks