General

  • Target

    90e35b4a519af394e32cd09d34c6d5f60b31726672aa41e37e2163c387f96a75.zip

  • Size

    265KB

  • Sample

    250126-cm42jaxrgt

  • MD5

    00097eedad77871551b61f53ae68e60c

  • SHA1

    cd389f891841ae9a90c09099cef8ad17815c7eb2

  • SHA256

    c55ff9a0342785eda080ebc4eb5b8a302e4a172865291c830dc9b9a4504f5f81

  • SHA512

    8cdcbb7c6901e07318c5dfc1e9cfd13d0f8e26394c151bac32acdf7803683338915e4d109ab64c618809fe1c03b545beb221065014619ef35e5316f84c52447b

  • SSDEEP

    6144:dcqxwaba4+rrkTfiRu2VMBkdCPJujN3C7/UnhinPU/9MQlrGFGj64dBY9:6qxwb4+rITsuRKdCPQjkonSUprPTDY9

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

Targets

    • Target

      90e35b4a519af394e32cd09d34c6d5f60b31726672aa41e37e2163c387f96a75.ps1

    • Size

      515KB

    • MD5

      3f1ba948583738562677a88f90b7c02a

    • SHA1

      745520bcbc46294c779893d41e9be2691a196e7e

    • SHA256

      90e35b4a519af394e32cd09d34c6d5f60b31726672aa41e37e2163c387f96a75

    • SHA512

      6c67da86017baa6b3f5491c1a5992513de0a6ecd9fbda0b4efa00fd1df266fdd3f2a316150abc35fa00e779c630a1e0d4d6ff1e16c04ce71bfcf4764a9bbbac7

    • SSDEEP

      12288:SnVelSMU9uT/Wz2LChUbwPVYlGZfZT3qcZKWFTUS:AeMMiuswChmUVFpZuB6r

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks