General

  • Target

    N01m7AT.exe

  • Size

    375KB

  • Sample

    250123-wydhhaznar

  • MD5

    ac3580444ea65e1cc7532f78d7c0bdb4

  • SHA1

    b2ceeba4c4e27bb0ddfd3e0d06ae8c7470e1792b

  • SHA256

    7f79443f3a37999bee9d3db99df9e07791a824dc1be53e01f1b30a3a8c2e6fb4

  • SHA512

    29b198fbcbd346f350aae82d3d4608ddb6a9e8c921a7d5444e6d9a40251c1fd27047cbe164efdb5f0de0355abe3c83a12b2c410f15da5fefcc93a7f3ae9ab2a4

  • SSDEEP

    6144:c0uPN84dFT08kOEXDXEhGPf16dB0yMB8jVzd4RRSih9mIqUVfcZkQ:c0uPNvW8zEXDXE4PyCLBCzd+yInVUZJ

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

https://suggestyuoz.biz/api

Targets

    • Target

      N01m7AT.exe

    • Size

      375KB

    • MD5

      ac3580444ea65e1cc7532f78d7c0bdb4

    • SHA1

      b2ceeba4c4e27bb0ddfd3e0d06ae8c7470e1792b

    • SHA256

      7f79443f3a37999bee9d3db99df9e07791a824dc1be53e01f1b30a3a8c2e6fb4

    • SHA512

      29b198fbcbd346f350aae82d3d4608ddb6a9e8c921a7d5444e6d9a40251c1fd27047cbe164efdb5f0de0355abe3c83a12b2c410f15da5fefcc93a7f3ae9ab2a4

    • SSDEEP

      6144:c0uPN84dFT08kOEXDXEhGPf16dB0yMB8jVzd4RRSih9mIqUVfcZkQ:c0uPNvW8zEXDXE4PyCLBCzd+yInVUZJ

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks