General

  • Target

    Aura.exe

  • Size

    494KB

  • Sample

    250123-sheh3stlay

  • MD5

    4a0b331b2989396ec96ba086515716cb

  • SHA1

    bc83cfc66f9feb3e3a8e73a0c1a97e057b2599f2

  • SHA256

    ac5d5310123af70db0e6985072448e19e1e714f709a74743a04094807f25c363

  • SHA512

    0425e5883f985b685fa390e03f7c6b49de8ca7ab52f3038fcdc564c4e1a8be26405fcbe2810b08b2c0ee75501920a411bbac8b0b2009b633eb2eac479d7e0b4a

  • SSDEEP

    6144:pnhInqREf6XFMCPgcARByZeCVUgArXnqAgAAReV7s+bWu0ELvfg2vD0B1XkQ:jREfjUgBRiUR3qARAReUu0Er0B1XJ

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

https://suggestyuoz.biz/api

Targets

    • Target

      Aura.exe

    • Size

      494KB

    • MD5

      4a0b331b2989396ec96ba086515716cb

    • SHA1

      bc83cfc66f9feb3e3a8e73a0c1a97e057b2599f2

    • SHA256

      ac5d5310123af70db0e6985072448e19e1e714f709a74743a04094807f25c363

    • SHA512

      0425e5883f985b685fa390e03f7c6b49de8ca7ab52f3038fcdc564c4e1a8be26405fcbe2810b08b2c0ee75501920a411bbac8b0b2009b633eb2eac479d7e0b4a

    • SSDEEP

      6144:pnhInqREf6XFMCPgcARByZeCVUgArXnqAgAAReV7s+bWu0ELvfg2vD0B1XkQ:jREfjUgBRiUR3qARAReUu0Er0B1XJ

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks