General

  • Target

    b5713079bc540d78a13d71edfe7387f97d771a3f30305a5b2978d77829ead3b1

  • Size

    7.0MB

  • Sample

    250226-wxmd1sysaw

  • MD5

    32caa1d65fa9e190ba77fadb84c64698

  • SHA1

    c96f77773845256728ae237f18a8cbc091aa3a59

  • SHA256

    b5713079bc540d78a13d71edfe7387f97d771a3f30305a5b2978d77829ead3b1

  • SHA512

    2dc5fe00b6536fc65f94baf71046bc3175eb1f5dec3969307aa5774601eb8fbfa24117e3e0adecd617ac2831c119bccb06e5b8b06b149075e06b76e921f71a60

  • SSDEEP

    98304:KkyEEC+/CQ35SpZakHWs4DQA92vfFUALEggvM4Uts/faKJmVkc6bJ0l/vnuJdJCR:+ffN0fmuW

Malware Config

Extracted

Family

lumma

C2

https://paleboreei.biz/api

Targets

    • Target

      b5713079bc540d78a13d71edfe7387f97d771a3f30305a5b2978d77829ead3b1

    • Size

      7.0MB

    • MD5

      32caa1d65fa9e190ba77fadb84c64698

    • SHA1

      c96f77773845256728ae237f18a8cbc091aa3a59

    • SHA256

      b5713079bc540d78a13d71edfe7387f97d771a3f30305a5b2978d77829ead3b1

    • SHA512

      2dc5fe00b6536fc65f94baf71046bc3175eb1f5dec3969307aa5774601eb8fbfa24117e3e0adecd617ac2831c119bccb06e5b8b06b149075e06b76e921f71a60

    • SSDEEP

      98304:KkyEEC+/CQ35SpZakHWs4DQA92vfFUALEggvM4Uts/faKJmVkc6bJ0l/vnuJdJCR:+ffN0fmuW

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks