General

  • Target

    Kapu.rar

  • Size

    54.6MB

  • Sample

    250129-2gjaba1nfw

  • MD5

    d16a925272ceec19fa2e28fb08559aca

  • SHA1

    80bf58d9b4455a14aa9912b9f4f3ae41e7693678

  • SHA256

    5b7619d7947264d93770adbf3207c786d1b56e8a9d874af4c98915f320fd0d1a

  • SHA512

    15a117b5820f78d3514c9e8a2e609341cff3d75202cc2d7c910c60b71ab45a0f40d7f9536379679efa9be38bd09e789cbefee26c32498a921e3f693f77a75015

  • SSDEEP

    1572864:dhSt7L7umWohH5YEUi8EdGwinHMPQd2tM:Hm9+jpEUwiHqQd22

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

Targets

    • Target

      Kapu.rar

    • Size

      54.6MB

    • MD5

      d16a925272ceec19fa2e28fb08559aca

    • SHA1

      80bf58d9b4455a14aa9912b9f4f3ae41e7693678

    • SHA256

      5b7619d7947264d93770adbf3207c786d1b56e8a9d874af4c98915f320fd0d1a

    • SHA512

      15a117b5820f78d3514c9e8a2e609341cff3d75202cc2d7c910c60b71ab45a0f40d7f9536379679efa9be38bd09e789cbefee26c32498a921e3f693f77a75015

    • SSDEEP

      1572864:dhSt7L7umWohH5YEUi8EdGwinHMPQd2tM:Hm9+jpEUwiHqQd22

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks