General

  • Target

    14b8061861f9f7985e7c26d362cb7d6064ccc0e453bc5f9fae20f0aca344e66a.exe

  • Size

    528KB

  • Sample

    250126-lnrx2azjhj

  • MD5

    7800d14dd719f17ca50851a8f7875622

  • SHA1

    b70e420b51f33f507294e74bf492d22f89e1d0b6

  • SHA256

    14b8061861f9f7985e7c26d362cb7d6064ccc0e453bc5f9fae20f0aca344e66a

  • SHA512

    a6e99fab58042c7d58703b1d2790f552638190a93d999ae36e460fa58ddbdb5a7aeeca2feb41e347a937f412ebc57a5fa32d9e992e24372ba59c721672e29c3e

  • SSDEEP

    12288:+tPYLwhHJ6mhUvkVkMBzHS2V5Nuv9hd2AgtlBNfG5Tyh:+2Lwr2kVbldr+9Ta3BSe

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

Targets

    • Target

      14b8061861f9f7985e7c26d362cb7d6064ccc0e453bc5f9fae20f0aca344e66a.exe

    • Size

      528KB

    • MD5

      7800d14dd719f17ca50851a8f7875622

    • SHA1

      b70e420b51f33f507294e74bf492d22f89e1d0b6

    • SHA256

      14b8061861f9f7985e7c26d362cb7d6064ccc0e453bc5f9fae20f0aca344e66a

    • SHA512

      a6e99fab58042c7d58703b1d2790f552638190a93d999ae36e460fa58ddbdb5a7aeeca2feb41e347a937f412ebc57a5fa32d9e992e24372ba59c721672e29c3e

    • SSDEEP

      12288:+tPYLwhHJ6mhUvkVkMBzHS2V5Nuv9hd2AgtlBNfG5Tyh:+2Lwr2kVbldr+9Ta3BSe

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks