General

  • Target

    rru_acidj.exe

  • Size

    501KB

  • Sample

    250123-shcdqatlav

  • MD5

    857527e1c12922094b9c3395685097c5

  • SHA1

    f219449c3e30bbaf360d42b1dd73a2e657ad23a3

  • SHA256

    196ef35b7dc1313c1a5792cc0cc24a3758645d94afcbd25ee0a2b2f7263266fa

  • SHA512

    634d1993449528858d64c30177f4ca2c935c0e6b727e8f0d826b380d8f6b929ca3a1e3b7ebea401bfee2d90f868e316fd3aab3c30caaba029becca33affdabac

  • SSDEEP

    6144:RnhInnirUr3fa6fq8terVGpHEUJxVkH9ji+m3PYJ0LHL82X0s5/ce4kQ:ZrUrv9ysegjTkH9O+OYJ0Lr8zspce4J

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

https://suggestyuoz.biz/api

Targets

    • Target

      rru_acidj.exe

    • Size

      501KB

    • MD5

      857527e1c12922094b9c3395685097c5

    • SHA1

      f219449c3e30bbaf360d42b1dd73a2e657ad23a3

    • SHA256

      196ef35b7dc1313c1a5792cc0cc24a3758645d94afcbd25ee0a2b2f7263266fa

    • SHA512

      634d1993449528858d64c30177f4ca2c935c0e6b727e8f0d826b380d8f6b929ca3a1e3b7ebea401bfee2d90f868e316fd3aab3c30caaba029becca33affdabac

    • SSDEEP

      6144:RnhInnirUr3fa6fq8terVGpHEUJxVkH9ji+m3PYJ0LHL82X0s5/ce4kQ:ZrUrv9ysegjTkH9O+OYJ0Lr8zspce4J

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks