General

  • Target

    Setup.exe

  • Size

    80.0MB

  • Sample

    250126-n6d51askbl

  • MD5

    ac2c6362493b6725826580ffc2c6530d

  • SHA1

    5f834e6697ec5ec9ecd878d25d719acfafe84fdc

  • SHA256

    d08d30643e05e82f6fa2d68925151643bd71f9ff42a31c08bbb33afc46cd346b

  • SHA512

    b8e019078b9c1d074580ea6d7f595a5f4ce06fb5ba37ed17cbc8b1549ce85f34d6dd98ae5e68eb70cf6d801a6dd796d1fe13cb26912a2cf0519e7f6f7f7dfc0f

  • SSDEEP

    24576:8uMKVkMPBB2n+mRSX43Q4C1EqTY34L8gQ6cHTwkpLob7Hb7j:mK+ow+m0XgqsoL8gsTwOO

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://leerborisup.shop/api

https://toppyneedus.biz/api

Targets

    • Target

      Setup.exe

    • Size

      80.0MB

    • MD5

      ac2c6362493b6725826580ffc2c6530d

    • SHA1

      5f834e6697ec5ec9ecd878d25d719acfafe84fdc

    • SHA256

      d08d30643e05e82f6fa2d68925151643bd71f9ff42a31c08bbb33afc46cd346b

    • SHA512

      b8e019078b9c1d074580ea6d7f595a5f4ce06fb5ba37ed17cbc8b1549ce85f34d6dd98ae5e68eb70cf6d801a6dd796d1fe13cb26912a2cf0519e7f6f7f7dfc0f

    • SSDEEP

      24576:8uMKVkMPBB2n+mRSX43Q4C1EqTY34L8gQ6cHTwkpLob7Hb7j:mK+ow+m0XgqsoL8gsTwOO

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks