General

  • Target

    StatuteCharacter_v3.exe

  • Size

    1.0MB

  • Sample

    250124-ew9z9ayraw

  • MD5

    693fa084e76b5aca087330266fbbed0f

  • SHA1

    98f684402583b46d71001ae707c998c8eda3d90d

  • SHA256

    48ba0ec4372403e7663262d0a9496f368709eebdaa60c80dfe773f497e5ad13a

  • SHA512

    63869cf2af997a796fd7bad8d458f92dcb405f2a1dbb23f57f99da95656d96cd48868de99c5eff301da51c791299803d965d71144f51b73bcb801efc008f5519

  • SSDEEP

    24576:+0cDxV5xBZZf4OwPnyQxpolAg+bfw/5zpEgpTHAdT55UwY:CxVJlwPnjElAg/7Eg10U1

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://uprootquincju.shop/api

Targets

    • Target

      StatuteCharacter_v3.exe

    • Size

      1.0MB

    • MD5

      693fa084e76b5aca087330266fbbed0f

    • SHA1

      98f684402583b46d71001ae707c998c8eda3d90d

    • SHA256

      48ba0ec4372403e7663262d0a9496f368709eebdaa60c80dfe773f497e5ad13a

    • SHA512

      63869cf2af997a796fd7bad8d458f92dcb405f2a1dbb23f57f99da95656d96cd48868de99c5eff301da51c791299803d965d71144f51b73bcb801efc008f5519

    • SSDEEP

      24576:+0cDxV5xBZZf4OwPnyQxpolAg+bfw/5zpEgpTHAdT55UwY:CxVJlwPnjElAg/7Eg10U1

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks