General

  • Target

    Set-up.exe

  • Size

    922.6MB

  • Sample

    250130-d81rnsxqdt

  • MD5

    a9871c86be8f9674ba1c49c77bcff19b

  • SHA1

    e374aaa35e51dff1003f54c0d3c766e3dd23f53d

  • SHA256

    77f0454ab2b207fe4772ab1bba3bd6ac36c1b03aff304dc5fe77861e9d3ecefb

  • SHA512

    f45c010f19ce4795bd774a479ea37854ed2a876f5e43548c19151b6a9aceaafe8ce16637869ee90f3d4512bc2f1f0ac628f375518d8daf0965660b5f256cf57c

  • SSDEEP

    49152:vzt48tTcqh4IfMm6jkZGSQA85dI4WvZLwz/9M5hrSkrh:hw9+d7ZW35xSLwz9M53

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://mistreanranger.biz/api

https://toppyneedus.biz/api

Targets

    • Target

      Set-up.exe

    • Size

      922.6MB

    • MD5

      a9871c86be8f9674ba1c49c77bcff19b

    • SHA1

      e374aaa35e51dff1003f54c0d3c766e3dd23f53d

    • SHA256

      77f0454ab2b207fe4772ab1bba3bd6ac36c1b03aff304dc5fe77861e9d3ecefb

    • SHA512

      f45c010f19ce4795bd774a479ea37854ed2a876f5e43548c19151b6a9aceaafe8ce16637869ee90f3d4512bc2f1f0ac628f375518d8daf0965660b5f256cf57c

    • SSDEEP

      49152:vzt48tTcqh4IfMm6jkZGSQA85dI4WvZLwz/9M5hrSkrh:hw9+d7ZW35xSLwz9M53

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks