General

  • Target

    game.rar

  • Size

    198.7MB

  • Sample

    250126-wwyqnazmfn

  • MD5

    11b59748521bf070a175100b48b3d9ca

  • SHA1

    97aee524b1817f588a966678550dfef42dfa4249

  • SHA256

    ab3e9253926b1d9cd7d1fcd1ba7e4af30dd0bc5744bc5e10d839026c36a0f324

  • SHA512

    aa0963081325c73f1730aa848be4a3b1a5bb2cf7d5746eaea820f397e2855e37ab16b42fa00fecfda46322b0e5f7ea35db3aaf5ed572fd122821fed1fd936c62

  • SSDEEP

    6291456:2+zTDyw0wl+Ln4jaIqfqvKwlnItIn+wMXPy:2UDy59nGtqf3wAInsy

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

Targets

    • Target

      game.rar

    • Size

      198.7MB

    • MD5

      11b59748521bf070a175100b48b3d9ca

    • SHA1

      97aee524b1817f588a966678550dfef42dfa4249

    • SHA256

      ab3e9253926b1d9cd7d1fcd1ba7e4af30dd0bc5744bc5e10d839026c36a0f324

    • SHA512

      aa0963081325c73f1730aa848be4a3b1a5bb2cf7d5746eaea820f397e2855e37ab16b42fa00fecfda46322b0e5f7ea35db3aaf5ed572fd122821fed1fd936c62

    • SSDEEP

      6291456:2+zTDyw0wl+Ln4jaIqfqvKwlnItIn+wMXPy:2UDy59nGtqf3wAInsy

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks