General

  • Target

    External2.4.exe

  • Size

    519KB

  • Sample

    250125-vdc6ka1rbz

  • MD5

    8941182a6d0c454bf679b27fcb99f327

  • SHA1

    de76d54d58b53355bbfdcb942e0f5262bdc25091

  • SHA256

    4aabc5c522ecef9200e1da99e5e747bc134955a80f712f0e5a42e048974fc65b

  • SHA512

    8143dc1ade3606e7fda8314107098303e3ac0cbebc670992409859af29dfd5da9f6d73fdb87ca7e0fa5e05a2e6ff20051653691291137690efc4dea3af4e88a7

  • SSDEEP

    12288:OtPYLwhHJ6mhUvkxv3xUPEaSAq5YPn76+5NHPH:O2Lwr2kjAEaSAPP76+5lH

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

Targets

    • Target

      External2.4.exe

    • Size

      519KB

    • MD5

      8941182a6d0c454bf679b27fcb99f327

    • SHA1

      de76d54d58b53355bbfdcb942e0f5262bdc25091

    • SHA256

      4aabc5c522ecef9200e1da99e5e747bc134955a80f712f0e5a42e048974fc65b

    • SHA512

      8143dc1ade3606e7fda8314107098303e3ac0cbebc670992409859af29dfd5da9f6d73fdb87ca7e0fa5e05a2e6ff20051653691291137690efc4dea3af4e88a7

    • SSDEEP

      12288:OtPYLwhHJ6mhUvkxv3xUPEaSAq5YPn76+5NHPH:O2Lwr2kjAEaSAPP76+5lH

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks