Resubmissions

22-01-2025 16:46

250122-t94gyswqcl 10

22-01-2025 16:21

250122-ttnrkawjfm 10

General

  • Target

    New v[2.4.0].exe

  • Size

    1.1MB

  • Sample

    250122-t94gyswqcl

  • MD5

    9a8c9182a0859c832937ead264bbdccc

  • SHA1

    1befbfb0934c63bbae334474bf07ed659729205b

  • SHA256

    3ca1157009c67f25f4fc8f01c995080146df3693a66fca4c218593249dd9d800

  • SHA512

    528598b359040f0d265854071f64d5574b1d231cf1d542baabf3391aaca2df49b99dfe262f0800d7878da922c99d0c26a81d1f9f01ac6b317ccae554df03905c

  • SSDEEP

    24576:MlNRzJv8ylX2/5VBCPdFFXru+5t4qpM/vc3b7Tb7j:OHJv8ylOC3Y+z4qSc/

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://impolitewearr.biz/api

https://toppyneedus.biz/api

https://lightdeerysua.biz/api

https://suggestyuoz.biz/api

https://hoursuhouy.biz/api

https://mixedrecipew.biz/api

https://affordtempyo.biz/api

https://pleasedcfrown.biz/api

Targets

    • Target

      New v[2.4.0].exe

    • Size

      1.1MB

    • MD5

      9a8c9182a0859c832937ead264bbdccc

    • SHA1

      1befbfb0934c63bbae334474bf07ed659729205b

    • SHA256

      3ca1157009c67f25f4fc8f01c995080146df3693a66fca4c218593249dd9d800

    • SHA512

      528598b359040f0d265854071f64d5574b1d231cf1d542baabf3391aaca2df49b99dfe262f0800d7878da922c99d0c26a81d1f9f01ac6b317ccae554df03905c

    • SSDEEP

      24576:MlNRzJv8ylX2/5VBCPdFFXru+5t4qpM/vc3b7Tb7j:OHJv8ylOC3Y+z4qSc/

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks