General

  • Target

    loader.exe

  • Size

    389KB

  • Sample

    250124-rzlhaavlbq

  • MD5

    8b17786b603d004e6d83e5f168778d9c

  • SHA1

    8b570151687aa04eafcae282c01662140c1174d1

  • SHA256

    bda3e7980f9045644b184b46fe78742ec7897bede2e40595a0d376de49e06eed

  • SHA512

    bf370f02a4015f2e3ca724aa9460c3fef334ecd59a5e33d13f9734466388addc6617a793822609872b284fd38bb4cfea0f92f248497e56d71690423cb3389f3d

  • SSDEEP

    6144:dd11YlFQtMwHL4iIlr8OmuJJhWNlT7oRYT7P5DkJ5mQkwS4NuKR7o46:311Y7qXirhBjhWHcRYJAXP8

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

Targets

    • Target

      loader.exe

    • Size

      389KB

    • MD5

      8b17786b603d004e6d83e5f168778d9c

    • SHA1

      8b570151687aa04eafcae282c01662140c1174d1

    • SHA256

      bda3e7980f9045644b184b46fe78742ec7897bede2e40595a0d376de49e06eed

    • SHA512

      bf370f02a4015f2e3ca724aa9460c3fef334ecd59a5e33d13f9734466388addc6617a793822609872b284fd38bb4cfea0f92f248497e56d71690423cb3389f3d

    • SSDEEP

      6144:dd11YlFQtMwHL4iIlr8OmuJJhWNlT7oRYT7P5DkJ5mQkwS4NuKR7o46:311Y7qXirhBjhWHcRYJAXP8

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks