Overview

overview

10

Static

static

3

2025-01-25...ch.exe

windows7-x64

1

2025-01-25...ch.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-25_862ea7ea848eb7be961a081eccdf1a4b_frostygoop_poet-rat_snatch

  • Size

    3.9MB

  • Sample

    250125-xvkcbaylgj

  • MD5

    862ea7ea848eb7be961a081eccdf1a4b

  • SHA1

    dd386d649252aaae21029525b834b2fa6c7be632

  • SHA256

    43aef788bbce2e8fbe33eb151eaf92eb23cf2ee5d160b2f0ca446e07c768564c

  • SHA512

    e75555d4e704e1399e72a16adf12d930e4b040eb22a05c55b3253bbbba2211db3cbb89ec5b1e3b9a3ae5c3215f7a222050995d85d388381bd267d1623c72f750

  • SSDEEP

    49152:dnbIX/8NraQkAodAW9ooFc3vcSyc44EpGRjj5IZVsKcKPbwQO:5IXQsZcoFjGr0VFcKjdO

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://bashfulacid.lat/api

https://tentabatte.lat/api

https://curverpluch.lat/api

https://talkynicer.lat/api

https://shapestickyr.lat/api

https://manyrestro.lat/api

https://slipperyloo.lat/api

https://wordyfindy.lat/api

https://burnfamesoilratewo.shop/api

Targets

    • Target

      2025-01-25_862ea7ea848eb7be961a081eccdf1a4b_frostygoop_poet-rat_snatch

    • Size

      3.9MB

    • MD5

      862ea7ea848eb7be961a081eccdf1a4b

    • SHA1

      dd386d649252aaae21029525b834b2fa6c7be632

    • SHA256

      43aef788bbce2e8fbe33eb151eaf92eb23cf2ee5d160b2f0ca446e07c768564c

    • SHA512

      e75555d4e704e1399e72a16adf12d930e4b040eb22a05c55b3253bbbba2211db3cbb89ec5b1e3b9a3ae5c3215f7a222050995d85d388381bd267d1623c72f750

    • SSDEEP

      49152:dnbIX/8NraQkAodAW9ooFc3vcSyc44EpGRjj5IZVsKcKPbwQO:5IXQsZcoFjGr0VFcKjdO

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks