General

  • Target

    Driver.exe

  • Size

    553KB

  • Sample

    250126-nrdwpa1qbl

  • MD5

    3fb5f0132baacf13507f5d0643b7d38c

  • SHA1

    4ab14ea21bc2e37886da29a22300dd529e1d3593

  • SHA256

    95610c880eabc595189e850fdd06bc1cd1c15dd7fa6b75426852a080571e8385

  • SHA512

    3d76978804ea63525b9ca0924116b4a6613ad310459600f3f0858eceda859752b4ff42f384f17bd07c5f54e50da6a7d804abd736fc13428fd8d4d49631829175

  • SSDEEP

    12288:+Y6R+JQXjAnN3ykQO4LJ0uPNvW8zEXDXE4PyCLBCzd+yInzUy:uTARQOSJ0ukbD0wCzdeb

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

Targets

    • Target

      Driver.exe

    • Size

      553KB

    • MD5

      3fb5f0132baacf13507f5d0643b7d38c

    • SHA1

      4ab14ea21bc2e37886da29a22300dd529e1d3593

    • SHA256

      95610c880eabc595189e850fdd06bc1cd1c15dd7fa6b75426852a080571e8385

    • SHA512

      3d76978804ea63525b9ca0924116b4a6613ad310459600f3f0858eceda859752b4ff42f384f17bd07c5f54e50da6a7d804abd736fc13428fd8d4d49631829175

    • SSDEEP

      12288:+Y6R+JQXjAnN3ykQO4LJ0uPNvW8zEXDXE4PyCLBCzd+yInzUy:uTARQOSJ0ukbD0wCzdeb

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks