Resubmissions

22-01-2025 21:08

250122-zy4apswqap 10

20-08-2024 12:56

240820-p6ra1asfqg 10

General

  • Target

    4898b9ca2adfdbf8369786f49ad6a0d8466439f5afd166bb57cded506a7f244f

  • Size

    277KB

  • Sample

    250122-zy4apswqap

  • MD5

    052bd8a72accfbfddec33ff5848ae51b

  • SHA1

    962cadc386efc98a383fde1d80abf385514ccd05

  • SHA256

    4898b9ca2adfdbf8369786f49ad6a0d8466439f5afd166bb57cded506a7f244f

  • SHA512

    339c74a42ebe24cafea2ae964901fe9128b9bdc8bb8dc9f3b72505c4ce5a39681b0c54888f79dc0983daebde488ba73e0d306d3033597e2a2b2a46f9fe98a597

  • SSDEEP

    6144:gZEPhl2XWuisvCybPM5fL2u5Wz2B2VXxs0+g1EVGMNBnkX2OEO:EEPj2XWD6PM5SK7hDg1EgMNBn3OEO

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://weiggheticulop.shop/api

https://consciousourwi.shop/api

https://southedhiscuso.shop/api

https://deicedosmzj.shop/api

https://cagedwifedsozm.shop/api

https://charecteristicdxp.shop/api

https://interactiedovspm.shop/api

https://potentioallykeos.shop/api

Targets

    • Target

      4898b9ca2adfdbf8369786f49ad6a0d8466439f5afd166bb57cded506a7f244f

    • Size

      277KB

    • MD5

      052bd8a72accfbfddec33ff5848ae51b

    • SHA1

      962cadc386efc98a383fde1d80abf385514ccd05

    • SHA256

      4898b9ca2adfdbf8369786f49ad6a0d8466439f5afd166bb57cded506a7f244f

    • SHA512

      339c74a42ebe24cafea2ae964901fe9128b9bdc8bb8dc9f3b72505c4ce5a39681b0c54888f79dc0983daebde488ba73e0d306d3033597e2a2b2a46f9fe98a597

    • SSDEEP

      6144:gZEPhl2XWuisvCybPM5fL2u5Wz2B2VXxs0+g1EVGMNBnkX2OEO:EEPj2XWD6PM5SK7hDg1EgMNBn3OEO

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks