General

  • Target

    cI34pCr.exe

  • Size

    384KB

  • Sample

    250123-wya3daznam

  • MD5

    eb479b640f838aaea07860e449e0e090

  • SHA1

    25ff4703418c9eb673770c3a5b1ea20aee7dd518

  • SHA256

    c32682308dd2c6195ec56538d4d461a12ca3b4eb611f5da734509069a292a063

  • SHA512

    da9c5f8efe97d53f42eb9df90f4b5814c207887a5303b34dec58c0ce020411b2524eb59f7b20d0db3f726953bc313a0d04b9ce2b711f613b30790ae4f4ce4185

  • SSDEEP

    6144:ld1uylo7HJ7grXn9t97k8zq3K0saL0oo/kAczM2ZcIjg1iLA/nmoaD2n1j:v1uyq7HFe9/jAoaLSsysL2nmN0j

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

https://suggestyuoz.biz/api

Targets

    • Target

      cI34pCr.exe

    • Size

      384KB

    • MD5

      eb479b640f838aaea07860e449e0e090

    • SHA1

      25ff4703418c9eb673770c3a5b1ea20aee7dd518

    • SHA256

      c32682308dd2c6195ec56538d4d461a12ca3b4eb611f5da734509069a292a063

    • SHA512

      da9c5f8efe97d53f42eb9df90f4b5814c207887a5303b34dec58c0ce020411b2524eb59f7b20d0db3f726953bc313a0d04b9ce2b711f613b30790ae4f4ce4185

    • SSDEEP

      6144:ld1uylo7HJ7grXn9t97k8zq3K0saL0oo/kAczM2ZcIjg1iLA/nmoaD2n1j:v1uyq7HFe9/jAoaLSsysL2nmN0j

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks