General

  • Target

    mm.zip

  • Size

    415KB

  • Sample

    250123-23kp9szjdm

  • MD5

    33bff70706b785bf8bcbec68c6d49c01

  • SHA1

    51d2c471ff81503f2e785901d3c2c521b16de104

  • SHA256

    edf6d3b74791880acb7e2df1871578c6d897958e13b14d1a562e76b36ed4fff6

  • SHA512

    396a7d12c8b7794abeba1d4dde01d65540b9aa997d17d8d810a2c861b8b4846ee5532347a14a76be5dc7a0312f0d9ca9296b216925a9c22c92f69da98a5aeb4e

  • SSDEEP

    6144:fAshWVSJJF84Tb9kKZFxw+DSoXVHxF3NwPBVPEyguUA8X5YzWkg2nVZg+5dCklm1:R4WF88vnv3NUPEymAq5Y5nV6+5dHoL

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

https://suggestyuoz.biz/api

Targets

    • Target

      mmpack.exe

    • Size

      519KB

    • MD5

      8941182a6d0c454bf679b27fcb99f327

    • SHA1

      de76d54d58b53355bbfdcb942e0f5262bdc25091

    • SHA256

      4aabc5c522ecef9200e1da99e5e747bc134955a80f712f0e5a42e048974fc65b

    • SHA512

      8143dc1ade3606e7fda8314107098303e3ac0cbebc670992409859af29dfd5da9f6d73fdb87ca7e0fa5e05a2e6ff20051653691291137690efc4dea3af4e88a7

    • SSDEEP

      12288:OtPYLwhHJ6mhUvkxv3xUPEaSAq5YPn76+5NHPH:O2Lwr2kjAEaSAPP76+5lH

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks