General

  • Target

    bakusas.zip

  • Size

    315KB

  • Sample

    250124-jy5krszlfn

  • MD5

    4473f86812e4aed0605804096ad390ca

  • SHA1

    8cf5de19e3caccdf07dc50c6fbd65f0cefa23ea3

  • SHA256

    5107eaa969493863afb2d837f0d99088537b5a642ed451fbbe435e4b4cb95a08

  • SHA512

    2dac6a82572e9d7a873a9d495babef05b50448e7fba44b717a60d953f5e96491c84afcb9b06b93ffecc0f3943df3bfe599d4aea38c73d5092137e2b07a1fa045

  • SSDEEP

    6144:Vvk0y4+tTAsTelKofX7AuvMX7J55E1dLnNp2+ek9VIps:Vv8tIlKofrnkrxEbL32+lDIC

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

Targets

    • Target

      texest.exe

    • Size

      21KB

    • MD5

      d3bdff6cb5950e6094b2674a070bc486

    • SHA1

      e058fe555a6e5f50f2a7a8f6455984c145b003f9

    • SHA256

      c01a815d58066daa05f86946fc7b13e55fe897abfed7db79b01243927ae97986

    • SHA512

      fa2adaf05f846e6bc5e1da55ac7ea39419f5b53454438d989293d446ab23ed2d438e9b8ee346fce98640dd7915b15b9b44f08424a661f74ffb2e07e92abe40c4

    • SSDEEP

      384:5ZTNsTYlKnUj9UIuW7zzIH9NhJ7nJaoCWK:5rs0lL9Q9jJVuWK

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Target

      wincr.dll

    • Size

      715KB

    • MD5

      95d42f9a4353884792d1cc37a68b9927

    • SHA1

      bba517c820309cff53e9450a3e706f974730eb02

    • SHA256

      cc3abb2edd23c0315ea5b35d7c2577142471b4e2ae113f98c3c21e3307cfbeb5

    • SHA512

      c5a3f3371db195257a27bd490692fe1a3888b30aac95985ad8d40a2120ea24bc4e4fde01c1bad997d1356967caf60e78aafac71e10991f47c643890cfd7b9502

    • SSDEEP

      12288:eNKNtIIsdpFAcTEDE0IEcHO5tYKGjo7m5C6KhSeGqdYhRW:eNQtIIs1H0CHe1Go7mUuhq

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks