General

  • Target

    2025-01-28_217d772e62543d3cd9a7d0d519501f48_frostygoop_poet-rat_snatch

  • Size

    8.8MB

  • Sample

    250128-zhf58s1lcx

  • MD5

    217d772e62543d3cd9a7d0d519501f48

  • SHA1

    dc0ca88b1bac0e1c2db1b3af0b59a141b6c6dc20

  • SHA256

    758a90a42b1b4a9da2026f2158428af3fd22b69d6b2cbbf3cc09638f64f73e17

  • SHA512

    7edf889d853c67698b3388a160f42dd582b82cc3159d81e48494185bdd6da202a4c011861ca64ac66a2f8ead1cf41d33a35b51689ce324dcdc6faf71cec932ef

  • SSDEEP

    98304:Yw7Fn1sXCVVVywiAOwBMxaIRCMYbC4VXIm5R1w:lXgA/BiaiCTbp5rw

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

Targets

    • Target

      2025-01-28_217d772e62543d3cd9a7d0d519501f48_frostygoop_poet-rat_snatch

    • Size

      8.8MB

    • MD5

      217d772e62543d3cd9a7d0d519501f48

    • SHA1

      dc0ca88b1bac0e1c2db1b3af0b59a141b6c6dc20

    • SHA256

      758a90a42b1b4a9da2026f2158428af3fd22b69d6b2cbbf3cc09638f64f73e17

    • SHA512

      7edf889d853c67698b3388a160f42dd582b82cc3159d81e48494185bdd6da202a4c011861ca64ac66a2f8ead1cf41d33a35b51689ce324dcdc6faf71cec932ef

    • SSDEEP

      98304:Yw7Fn1sXCVVVywiAOwBMxaIRCMYbC4VXIm5R1w:lXgA/BiaiCTbp5rw

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks