General

  • Target

    2025-01-14_ec6b54735d7321a41bd0321f72223731_frostygoop_poet-rat_snatch

  • Size

    21.5MB

  • Sample

    250114-w9ejyaxpej

  • MD5

    ec6b54735d7321a41bd0321f72223731

  • SHA1

    aab814baf073ab69f47ff6afe74d24599da922a3

  • SHA256

    53fc9bdd31c2af05ee8882d3becd1dcb6377221e8d43b7704abb68646e34ae45

  • SHA512

    ff96772da28865f1900f8c09ec0f3555f8fe7774d3a276176ac8c5b23c855cdbe9812ef867f0e4fcb53693bdeed2a9fb410e4aaeae2cfb9a8434063732eb3916

  • SSDEEP

    196608:QbDrsadAVWkG5ujxk/XM30zQKox6enSmae1rfM+IRYqXl:EZ/M30Qdn5aeB83

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://necessaryattm.shop/api

Targets

    • Target

      2025-01-14_ec6b54735d7321a41bd0321f72223731_frostygoop_poet-rat_snatch

    • Size

      21.5MB

    • MD5

      ec6b54735d7321a41bd0321f72223731

    • SHA1

      aab814baf073ab69f47ff6afe74d24599da922a3

    • SHA256

      53fc9bdd31c2af05ee8882d3becd1dcb6377221e8d43b7704abb68646e34ae45

    • SHA512

      ff96772da28865f1900f8c09ec0f3555f8fe7774d3a276176ac8c5b23c855cdbe9812ef867f0e4fcb53693bdeed2a9fb410e4aaeae2cfb9a8434063732eb3916

    • SSDEEP

      196608:QbDrsadAVWkG5ujxk/XM30zQKox6enSmae1rfM+IRYqXl:EZ/M30Qdn5aeB83

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks