Resubmissions

24-01-2025 17:29

250124-v2lgvayrh1 10

24-01-2025 17:15

250124-vsxhraypav 10

General

  • Target

    Iaunc3r_WlNN_x_64-86_v.3.1.8+P0rtabI3xtt.zip

  • Size

    160.6MB

  • Sample

    250124-vsxhraypav

  • MD5

    7f08dbea039c89756e134e7ea8004517

  • SHA1

    1c6dd52e51b4f9ab4f8bb5669bb0d74582c7544e

  • SHA256

    3bc5e44b571b6f1f36f5f28d65811754806ed664e4795b6a0e0b8e0bc6529e14

  • SHA512

    ee7e85d53166aee157c618e98998ff0e95907eed3e033e090485c99017f501bed1117531477c016bf72b73fa121372dfaf5e16a4c10ecf9c5b7ba6a61dde5768

  • SSDEEP

    3145728:NhsWVGY9K0IanqGO5JdIpNwu0GspULptXdrSk:pKpG/lupULL1D

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

Targets

    • Target

      Iaunc3r_WlNN_x_64-86_v.3.1.8+P0rtabI3xt.rar

    • Size

      160.6MB

    • MD5

      5da47dfa460ad7986d6fb5042cc80c65

    • SHA1

      f583a8c8a3948ba90259c4f5b0a67f301baebf16

    • SHA256

      57460fcf50f1c8f7d00caaa2b1e7935308bc1e177fc4a1638c10e0538b025542

    • SHA512

      b0e9f3b6f2c9a80b7d44505249653543c0a03ab72e5bdefce9a7b35548f8f9525cdca5e2b952fdab4a61f0560587d149e668b7e8f34a02a475216cded9edc2fa

    • SSDEEP

      3145728:thsWVGY9K0IanqGO5JdIpNwu0GspULptXdrSN:JKpG/lupULL1E

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Executes dropped EXE

    • Target

      Iaunc3r_WlNN_x_64-86_v.3.1.8+P0rtabI3xt/MigrationService/helper/bin/klist.exe

    • Size

      30KB

    • MD5

      67f1877ee5e0cf2aca0d29a04691315c

    • SHA1

      572b30f193a178a11b8a58b2b2305fddc48defdf

    • SHA256

      2fae26a74243aee9faa6566bf3be1fbea356329810e13a9e73cbae859827857f

    • SHA512

      bc60813d6777debb390d1bcec7962cbb3dbf6dc70933162782a21ea45b50306ace6a2a2528421d099d8caba5bb1dfa0bddd955e04ed6f520ffb22934fb24fdc1

    • SSDEEP

      768:0QsNbEozw0g7Z8i9xoRK56tChPn8UlTwvbCFgMmZ:NYg7Z8oJ56tCaWTsCSDZ

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks