General

  • Target

    90e35b4a519af394e32cd09d34c6d5f60b31726672aa41e37e2163c387f96a75.ps1

  • Size

    515KB

  • Sample

    250126-eajk6s1jdv

  • MD5

    3f1ba948583738562677a88f90b7c02a

  • SHA1

    745520bcbc46294c779893d41e9be2691a196e7e

  • SHA256

    90e35b4a519af394e32cd09d34c6d5f60b31726672aa41e37e2163c387f96a75

  • SHA512

    6c67da86017baa6b3f5491c1a5992513de0a6ecd9fbda0b4efa00fd1df266fdd3f2a316150abc35fa00e779c630a1e0d4d6ff1e16c04ce71bfcf4764a9bbbac7

  • SSDEEP

    12288:SnVelSMU9uT/Wz2LChUbwPVYlGZfZT3qcZKWFTUS:AeMMiuswChmUVFpZuB6r

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

Targets

    • Target

      90e35b4a519af394e32cd09d34c6d5f60b31726672aa41e37e2163c387f96a75.ps1

    • Size

      515KB

    • MD5

      3f1ba948583738562677a88f90b7c02a

    • SHA1

      745520bcbc46294c779893d41e9be2691a196e7e

    • SHA256

      90e35b4a519af394e32cd09d34c6d5f60b31726672aa41e37e2163c387f96a75

    • SHA512

      6c67da86017baa6b3f5491c1a5992513de0a6ecd9fbda0b4efa00fd1df266fdd3f2a316150abc35fa00e779c630a1e0d4d6ff1e16c04ce71bfcf4764a9bbbac7

    • SSDEEP

      12288:SnVelSMU9uT/Wz2LChUbwPVYlGZfZT3qcZKWFTUS:AeMMiuswChmUVFpZuB6r

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks