General

  • Target

    R--E--L--X64.zip

  • Size

    12.4MB

  • Sample

    250125-ddvbeaskd1

  • MD5

    c15fd8fb24e218465eacb83034976dbd

  • SHA1

    476d1af8f1f4db7f4a47cb5035c709bcfb5e18c1

  • SHA256

    78c86099f9d14307ddf5e1677deebb728a70dfc4fe2b669964a8cc77d2dc52b0

  • SHA512

    4383d1178a516af4bf91d6d017f989926c23ad18d3d5415e7eb6cef871b0435f28f950f3063b61bb53069c76bcadb0c65353bac7963a00b6d93a0ffeed0cccd0

  • SSDEEP

    393216:DLrUmykpCwOk1vFRSCFFJLZtBcYdAtA8Rxm3w9lV:jUoCe9ACHtBlz82SlV

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://sheayingero.shop/api

https://toppyneedus.biz/api

Targets

    • Target

      R--E--L--X64.zip

    • Size

      12.4MB

    • MD5

      c15fd8fb24e218465eacb83034976dbd

    • SHA1

      476d1af8f1f4db7f4a47cb5035c709bcfb5e18c1

    • SHA256

      78c86099f9d14307ddf5e1677deebb728a70dfc4fe2b669964a8cc77d2dc52b0

    • SHA512

      4383d1178a516af4bf91d6d017f989926c23ad18d3d5415e7eb6cef871b0435f28f950f3063b61bb53069c76bcadb0c65353bac7963a00b6d93a0ffeed0cccd0

    • SSDEEP

      393216:DLrUmykpCwOk1vFRSCFFJLZtBcYdAtA8Rxm3w9lV:jUoCe9ACHtBlz82SlV

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks