General

  • Target

    Loader.exe

  • Size

    395KB

  • Sample

    250125-r1rqpaxjhz

  • MD5

    d77614f7ea4b89a831874b3dfdd909a9

  • SHA1

    69274a7177d81ff53e1f5ad6577035bc082f4bce

  • SHA256

    9f9004cec568da6b1b35447ae42e9482df421162a32fcdca5b91fa78128e6efe

  • SHA512

    89b81e244bf7363bdce32663c4e5dd4ff99cd1d1ca12d3311e40f0ddc96494d79f95892e44cc2a3bcbfdd81e24749960c7240b1179d94c8f298ceaaa498f03e1

  • SSDEEP

    6144:7WAoFwzNQONWylo7HJ7grXn9t97k8zq3K0saL0oo/kAczM2ZcIjg1iLA/nmol2nF:7FbzyONWyq7HFe9/jAoaLSsysL2nmq0j

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

Targets

    • Target

      Loader.exe

    • Size

      395KB

    • MD5

      d77614f7ea4b89a831874b3dfdd909a9

    • SHA1

      69274a7177d81ff53e1f5ad6577035bc082f4bce

    • SHA256

      9f9004cec568da6b1b35447ae42e9482df421162a32fcdca5b91fa78128e6efe

    • SHA512

      89b81e244bf7363bdce32663c4e5dd4ff99cd1d1ca12d3311e40f0ddc96494d79f95892e44cc2a3bcbfdd81e24749960c7240b1179d94c8f298ceaaa498f03e1

    • SSDEEP

      6144:7WAoFwzNQONWylo7HJ7grXn9t97k8zq3K0saL0oo/kAczM2ZcIjg1iLA/nmol2nF:7FbzyONWyq7HFe9/jAoaLSsysL2nmq0j

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks