Resubmissions

28/01/2025, 15:38

250128-s3jnjawmfl 10

28/01/2025, 15:36

250128-s2bljawmcl 1

General

  • Target

    tinytask.ini

  • Size

    138B

  • Sample

    250128-s3jnjawmfl

  • MD5

    d465b9cbc77ddf9824cca8f5feaae92a

  • SHA1

    0df323d9413f003daff067c096e07cb532ce7a0f

  • SHA256

    c2e6ad96ec93f7931042c835e744f8262f698dfea48388daae31927a29453814

  • SHA512

    43a0f7de171bcd57140b28d2d4ddbdb5ed26f15ce83f937cea8df98205132a897dda883553bfab3ada1bc5c4c39b46ba8312a540eccdf2cc3b3510fe1e965190

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

Targets

    • Target

      tinytask.ini

    • Size

      138B

    • MD5

      d465b9cbc77ddf9824cca8f5feaae92a

    • SHA1

      0df323d9413f003daff067c096e07cb532ce7a0f

    • SHA256

      c2e6ad96ec93f7931042c835e744f8262f698dfea48388daae31927a29453814

    • SHA512

      43a0f7de171bcd57140b28d2d4ddbdb5ed26f15ce83f937cea8df98205132a897dda883553bfab3ada1bc5c4c39b46ba8312a540eccdf2cc3b3510fe1e965190

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Executes dropped EXE

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks