General

  • Target

    2025-02-18_62533bbbbad79dc3a6d0cd980e93b351_hijackloader_luca-stealer_magniber

  • Size

    11.6MB

  • Sample

    250218-kc3pqazqx4

  • MD5

    62533bbbbad79dc3a6d0cd980e93b351

  • SHA1

    4720cb01cefadeadef364eca994f9fe02404c1e0

  • SHA256

    42adcc9314110b4a6e0fbaf59d6308783a74faa260b817b2f2ca78813b7ec6e8

  • SHA512

    990248dd8c76fe96d99077fbdd47baa3b1e7262d69e07602492a55cf75fea9ffb24c188e21f89c9cb6cfd9d9cde36146c6648a0a4374f86d6669bf2c7c821a7f

  • SSDEEP

    196608:ljc2X+2F6BId7LkJbG1k9P3pRlvMPuldMI1rqNf2RjSWOT:lY8FLdg9P3llldtrqN+SZ

Malware Config

Extracted

Family

lumma

C2

https://mercharena.biz/api

Targets

    • Target

      2025-02-18_62533bbbbad79dc3a6d0cd980e93b351_hijackloader_luca-stealer_magniber

    • Size

      11.6MB

    • MD5

      62533bbbbad79dc3a6d0cd980e93b351

    • SHA1

      4720cb01cefadeadef364eca994f9fe02404c1e0

    • SHA256

      42adcc9314110b4a6e0fbaf59d6308783a74faa260b817b2f2ca78813b7ec6e8

    • SHA512

      990248dd8c76fe96d99077fbdd47baa3b1e7262d69e07602492a55cf75fea9ffb24c188e21f89c9cb6cfd9d9cde36146c6648a0a4374f86d6669bf2c7c821a7f

    • SSDEEP

      196608:ljc2X+2F6BId7LkJbG1k9P3pRlvMPuldMI1rqNf2RjSWOT:lY8FLdg9P3llldtrqN+SZ

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks