General

  • Target

    exlauncher43

  • Size

    72KB

  • Sample

    250122-w4sjlszmhp

  • MD5

    cb6b6132a66210df95e060df9b23d83e

  • SHA1

    e0be4deed6b359eb3f91a4c7c85ac193a3adfa25

  • SHA256

    c745ca7fae116ef43c7329ea75b6d395ed86f38f71fb6557fb03960230afb352

  • SHA512

    a6cbe262dba0c417349abc07dbdc8ba447854bc277eaf51af15c3d5f25a3139658f3e3a226312704d4553093661f8b1da65f56cc51262904903ebd9dfcafae0c

  • SSDEEP

    1536:Nk8iW/o/qz3fW8iW9IqjkbTM/k85SMPKwEpXfM12bMAs8EpnWFSQovqBfbtc:N3wqz3fEd85SMPKTXfMOMWEISQo0xc

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

https://suggestyuoz.biz/api

Targets

    • Target

      exlauncher43

    • Size

      72KB

    • MD5

      cb6b6132a66210df95e060df9b23d83e

    • SHA1

      e0be4deed6b359eb3f91a4c7c85ac193a3adfa25

    • SHA256

      c745ca7fae116ef43c7329ea75b6d395ed86f38f71fb6557fb03960230afb352

    • SHA512

      a6cbe262dba0c417349abc07dbdc8ba447854bc277eaf51af15c3d5f25a3139658f3e3a226312704d4553093661f8b1da65f56cc51262904903ebd9dfcafae0c

    • SSDEEP

      1536:Nk8iW/o/qz3fW8iW9IqjkbTM/k85SMPKwEpXfM12bMAs8EpnWFSQovqBfbtc:N3wqz3fEd85SMPKTXfMOMWEISQo0xc

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks