General

  • Target

    2025-01-24_655bef72235aaad69a2dbd5ad7790c2e_frostygoop_poet-rat_snatch

  • Size

    6.2MB

  • Sample

    250124-d3mb4axmgw

  • MD5

    655bef72235aaad69a2dbd5ad7790c2e

  • SHA1

    ba2ce943a3dedbbc0b150a0fd1c8b8107224ee02

  • SHA256

    158b11e1d2921e17de74750c7f391e68357b6412e3f9ef7ddf53d1c08cff9388

  • SHA512

    bbe41ce4ed375c2e3f978fc4d74fa5bbc6a651b2b345198a44f6662f5a2e58eff666422b047e9203bdfd4b8e400a91ceac04861d8d99cd994512bcdb3f46c453

  • SSDEEP

    98304:+yZabdURyahFrM51Q+/ptahx1NWSI8xl:1ysc51Q+/ptahxu8x

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://tuttlecombe.click/api

Targets

    • Target

      2025-01-24_655bef72235aaad69a2dbd5ad7790c2e_frostygoop_poet-rat_snatch

    • Size

      6.2MB

    • MD5

      655bef72235aaad69a2dbd5ad7790c2e

    • SHA1

      ba2ce943a3dedbbc0b150a0fd1c8b8107224ee02

    • SHA256

      158b11e1d2921e17de74750c7f391e68357b6412e3f9ef7ddf53d1c08cff9388

    • SHA512

      bbe41ce4ed375c2e3f978fc4d74fa5bbc6a651b2b345198a44f6662f5a2e58eff666422b047e9203bdfd4b8e400a91ceac04861d8d99cd994512bcdb3f46c453

    • SSDEEP

      98304:+yZabdURyahFrM51Q+/ptahx1NWSI8xl:1ysc51Q+/ptahxu8x

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks