General

  • Target
    C2Panel-main.zip
  • Size 6.9MB
  • Sample261025-b532hsxyhs
  • SHA256 432d4b973dd371dd02babdc646ef80615cf93cdd47df3751befa2ba933880a5e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • lumma

C2
  • https://covvercilverow.shop/api

  • https://surroundeocw.shop/api

  • https://abortinoiwiam.shop/api

  • https://pumpkinkwquo.shop/api

  • https://priooozekw.shop/api

  • https://deallyharvenw.shop/api

  • https://defenddsouneuw.shop/api

  • https://racedsuitreow.shop/api

  • https://roaddrermncomplai.shop/api

Targets

    • Target
      C2Panel-main/C2Panel.exe
    • Size 550KB
    • SHA256 e17bf83e09457d8cecd1f3e903fa4c9770e17e823731650a453bc479591ac511
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Family: Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    • Target
      C2Panel-main/DrakeUI.Framework.dll
    • Size 1.6MB
    • SHA256 70e72477f7fe0018e043ce8fe2228a289459058ee41caecd6f05855898bc5b80
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      C2Panel-main/GeoIPCitys.dll
    • Size 191KB
    • SHA256 d54fd6c5903eea49a75d620d4ba232f8effb1863f5f9c974e4ac0a8fb1904131
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      C2Panel-main/HVMRun64.dll
    • Size 4.3MB
    • SHA256 14f61c269509eb27083883d5e8edcf9ed14f3b62cfbfb69f4f7434d64a7fa924
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      C2Panel-main/HVMRuntm.dll
    • Size 2.2MB
    • SHA256 52cf690f3436c9e98a2ab13e2871ca95da72c34ea5dd36d5c52ecccfa78b5696
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      C2Panel-main/LiveCharts.MAPS.dll
    • Size 53KB
    • SHA256 5b8a9a04f454a2c4da5989fa454a0138d3e5c40712816600f90111b7bf045c40
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      C2Panel-main/LiveCharts.dll
    • Size 148KB
    • SHA256 9fcf89837b60f69c1c501e4cfa4d2860887afd0b8f325803367e795a4e3bc9ca
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks