General
-
Target
bld
-
Size
103KB
-
Sample
250126-plrq2asnbr
-
MD5
3dfba0cc6d418d217bddda159cf1c964
-
SHA1
94cdbbc8a83ac1504782a94ce2920623411d06bf
-
SHA256
8efe587c91bed5dc35ca7a2ddf1f2dd7855679b13aad0fba615e461bcabd9eb9
-
SHA512
3bec0071889b29ba943ec09424bc8c9356742d2c7c54b812d298b8c536ebf4a158d2afa749371aef3591a586de3a9b47f3f30fe4ba3c50c011b11c46bcd5cd3b
-
SSDEEP
1536:mppWHneXKDzgtQXoo2L45YgmxhMpvg5sdlfZEfM713hwVvdUGu/4D3Y2yaGmpXse:W/XKD8o24aw4fM9hwVv2/48spXs10
Static task
static1
Malware Config
Extracted
lumma
https://toppyneedus.biz/api
Targets
-
-
Target
bld
-
Size
103KB
-
MD5
3dfba0cc6d418d217bddda159cf1c964
-
SHA1
94cdbbc8a83ac1504782a94ce2920623411d06bf
-
SHA256
8efe587c91bed5dc35ca7a2ddf1f2dd7855679b13aad0fba615e461bcabd9eb9
-
SHA512
3bec0071889b29ba943ec09424bc8c9356742d2c7c54b812d298b8c536ebf4a158d2afa749371aef3591a586de3a9b47f3f30fe4ba3c50c011b11c46bcd5cd3b
-
SSDEEP
1536:mppWHneXKDzgtQXoo2L45YgmxhMpvg5sdlfZEfM713hwVvdUGu/4D3Y2yaGmpXse:W/XKD8o24aw4fM9hwVv2/48spXs10
-
Lumma family
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-
Enumerates processes with tasklist
-