Overview

overview

10

Static

static

1

Folder.js

windows7-x64

3

Folder.js

windows10-2004-x64

3

Folder.js

windows10-ltsc 2021-x64

10

Folder.js

windows11-21h2-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Folder

  • Size

    155KB

  • Sample

    250127-zfy82avkgz

  • MD5

    3a230c4bf21843a79040e219b12f2863

  • SHA1

    ac02f083f845cda9c64e46a757bed5aef4a610d1

  • SHA256

    b15cc222989fb3f1be897395b6854d36073ec06fa5b54c6e4efa7d89221265fb

  • SHA512

    6bf22bf8a94ac357f7992c8a81c995804f69842a9f027f4881f1c202a047aed44d7f6202ade9a125f1f7308836476bb2d2905f231a339dc738ef6fe784806d83

  • SSDEEP

    3072:MIHm8kpp+NLZaoA9V+hg3XcqJ0avMpzi+7qqHpBSY:S0NLZaoA9V+hg3XcqJ0eMpzi+kY

Score
10/10
lummadiscoveryexecutionstealer

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

Targets

    • Target

      Folder

    • Size

      155KB

    • MD5

      3a230c4bf21843a79040e219b12f2863

    • SHA1

      ac02f083f845cda9c64e46a757bed5aef4a610d1

    • SHA256

      b15cc222989fb3f1be897395b6854d36073ec06fa5b54c6e4efa7d89221265fb

    • SHA512

      6bf22bf8a94ac357f7992c8a81c995804f69842a9f027f4881f1c202a047aed44d7f6202ade9a125f1f7308836476bb2d2905f231a339dc738ef6fe784806d83

    • SSDEEP

      3072:MIHm8kpp+NLZaoA9V+hg3XcqJ0avMpzi+7qqHpBSY:S0NLZaoA9V+hg3XcqJ0eMpzi+kY

    Score
    10/10
    executionlummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Executes dropped EXE

    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks