General

  • Target

    LoaderX.exe

  • Size

    510KB

  • Sample

    250122-v8vzvsxlft

  • MD5

    fa7c23afe862836ee03a40b71a15036c

  • SHA1

    40d8b5a4ce6c1f05b3c3ddfc4cbea68a4319a85f

  • SHA256

    47779392666abfe569c6069712e1d3317dc84629770a593a9d55b83be5f771b6

  • SHA512

    af0038e486551428baf33989504d42c52811cb30ec34e6cd5f52aa747eb4dfeaecdd7af32c562ae21d2e6f676da614658ffabc0f3563957cab31c3b11b2a5847

  • SSDEEP

    12288:OrUrv9ysegjTkH9O+OYJ0Lr8zspre4qEO:rrvpeaTkdjOxr8zIrRqt

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://impolitewearr.biz/api

https://toppyneedus.biz/api

https://lightdeerysua.biz/api

https://suggestyuoz.biz/api

https://hoursuhouy.biz/api

https://mixedrecipew.biz/api

https://affordtempyo.biz/api

https://pleasedcfrown.biz/api

Targets

    • Target

      LoaderX.exe

    • Size

      510KB

    • MD5

      fa7c23afe862836ee03a40b71a15036c

    • SHA1

      40d8b5a4ce6c1f05b3c3ddfc4cbea68a4319a85f

    • SHA256

      47779392666abfe569c6069712e1d3317dc84629770a593a9d55b83be5f771b6

    • SHA512

      af0038e486551428baf33989504d42c52811cb30ec34e6cd5f52aa747eb4dfeaecdd7af32c562ae21d2e6f676da614658ffabc0f3563957cab31c3b11b2a5847

    • SSDEEP

      12288:OrUrv9ysegjTkH9O+OYJ0Lr8zspre4qEO:rrvpeaTkdjOxr8zIrRqt

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks