General

  • Target

    bld

  • Size

    103KB

  • Sample

    250126-plrq2asnbr

  • MD5

    3dfba0cc6d418d217bddda159cf1c964

  • SHA1

    94cdbbc8a83ac1504782a94ce2920623411d06bf

  • SHA256

    8efe587c91bed5dc35ca7a2ddf1f2dd7855679b13aad0fba615e461bcabd9eb9

  • SHA512

    3bec0071889b29ba943ec09424bc8c9356742d2c7c54b812d298b8c536ebf4a158d2afa749371aef3591a586de3a9b47f3f30fe4ba3c50c011b11c46bcd5cd3b

  • SSDEEP

    1536:mppWHneXKDzgtQXoo2L45YgmxhMpvg5sdlfZEfM713hwVvdUGu/4D3Y2yaGmpXse:W/XKD8o24aw4fM9hwVv2/48spXs10

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

Targets

    • Target

      bld

    • Size

      103KB

    • MD5

      3dfba0cc6d418d217bddda159cf1c964

    • SHA1

      94cdbbc8a83ac1504782a94ce2920623411d06bf

    • SHA256

      8efe587c91bed5dc35ca7a2ddf1f2dd7855679b13aad0fba615e461bcabd9eb9

    • SHA512

      3bec0071889b29ba943ec09424bc8c9356742d2c7c54b812d298b8c536ebf4a158d2afa749371aef3591a586de3a9b47f3f30fe4ba3c50c011b11c46bcd5cd3b

    • SSDEEP

      1536:mppWHneXKDzgtQXoo2L45YgmxhMpvg5sdlfZEfM713hwVvdUGu/4D3Y2yaGmpXse:W/XKD8o24aw4fM9hwVv2/48spXs10

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks