General

  • Target

    2025-01-16_250df8746136444d6be39a1fb15baf22_frostygoop_poet-rat_snatch

  • Size

    8.4MB

  • Sample

    250116-vxtyes1jgv

  • MD5

    250df8746136444d6be39a1fb15baf22

  • SHA1

    b0cd03a741eb22801256c6dec49da0e98c2b0455

  • SHA256

    c0b1ae468df6b97c549c6cf37a114ef53a90e734102ba1c5e71593523ec7df4b

  • SHA512

    7cc91abfb544e0ab68d3965f0f31fd3a914d0986fc359bd6de5674616b5424200ca1413132c48b3b4e2465752c83f9066726eeeb19b0aaaad3859928216543df

  • SSDEEP

    98304:Pw8gJ6OGx9d89g4BNwJNZRKMp9FwmsDu1lauVgJ6AhG:IRm54I9w8lZ+RhG

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://tinpanckakgou.shop/api

Targets

    • Target

      2025-01-16_250df8746136444d6be39a1fb15baf22_frostygoop_poet-rat_snatch

    • Size

      8.4MB

    • MD5

      250df8746136444d6be39a1fb15baf22

    • SHA1

      b0cd03a741eb22801256c6dec49da0e98c2b0455

    • SHA256

      c0b1ae468df6b97c549c6cf37a114ef53a90e734102ba1c5e71593523ec7df4b

    • SHA512

      7cc91abfb544e0ab68d3965f0f31fd3a914d0986fc359bd6de5674616b5424200ca1413132c48b3b4e2465752c83f9066726eeeb19b0aaaad3859928216543df

    • SSDEEP

      98304:Pw8gJ6OGx9d89g4BNwJNZRKMp9FwmsDu1lauVgJ6AhG:IRm54I9w8lZ+RhG

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks