General

  • Target

    protect.php.zip

  • Size

    10.2MB

  • Sample

    250123-sje61atldx

  • MD5

    a48874485753cfb92866bceb15834cec

  • SHA1

    42cb8b5fcb9c8d428f4c8a8258edb716aee59e19

  • SHA256

    61ebc6870dfcda5ef56cea8f6f3c9dcec0ab8db601d07490f9d91064e6acae71

  • SHA512

    760e7eef9807a723312b17e1fc790af13bbca48b55b4dc38737fccf08cbe2253cd06662a8817fd621f0c928a54ef88ce63ea431ae272e2061f210f287f1de375

  • SSDEEP

    196608:3C/znYKMqD/zlWjJSMZTQROgz2LF2bDsRTGfVDM4hp3G50b0R5VhmwP3dKa:3CcmD/z0FSdRfzcwDsdGy4jGGbe5Vowb

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

https://suggestyuoz.biz/api

Targets

    • Target

      protect.php.zip

    • Size

      10.2MB

    • MD5

      a48874485753cfb92866bceb15834cec

    • SHA1

      42cb8b5fcb9c8d428f4c8a8258edb716aee59e19

    • SHA256

      61ebc6870dfcda5ef56cea8f6f3c9dcec0ab8db601d07490f9d91064e6acae71

    • SHA512

      760e7eef9807a723312b17e1fc790af13bbca48b55b4dc38737fccf08cbe2253cd06662a8817fd621f0c928a54ef88ce63ea431ae272e2061f210f287f1de375

    • SSDEEP

      196608:3C/znYKMqD/zlWjJSMZTQROgz2LF2bDsRTGfVDM4hp3G50b0R5VhmwP3dKa:3CcmD/z0FSdRfzcwDsdGy4jGGbe5Vowb

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks