General

  • Target

    2025-01-29_cfef04ea493e91d89c1fd46b3bd9ea14_frostygoop_poet-rat_snatch

  • Size

    5.9MB

  • Sample

    250129-3pegrssph1

  • MD5

    cfef04ea493e91d89c1fd46b3bd9ea14

  • SHA1

    a27b76399a4ac657a7517862ede26a383b278fb6

  • SHA256

    abf5a322dc32fef4bb9750165fe82e4344fdaefb79af403afd8de64dd9cdce4d

  • SHA512

    d2c466a03a1f4b164d2dff3fd064abaf5a83b82c7fc304b3e0354b57953f9ee95a3adb713a0851eb64e6c6fa94e7973f2740024d03147bf958fb1a9a7343d931

  • SSDEEP

    49152:6cT+4Ppzg5xTe2QvAr05U+bFdvOy/rzBgmW2I0/9T8vEbZr4APmpGQKf7azauWtg:6A3PpE5U2QvkeU+J/9t7PcjBSA

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

Targets

    • Target

      2025-01-29_cfef04ea493e91d89c1fd46b3bd9ea14_frostygoop_poet-rat_snatch

    • Size

      5.9MB

    • MD5

      cfef04ea493e91d89c1fd46b3bd9ea14

    • SHA1

      a27b76399a4ac657a7517862ede26a383b278fb6

    • SHA256

      abf5a322dc32fef4bb9750165fe82e4344fdaefb79af403afd8de64dd9cdce4d

    • SHA512

      d2c466a03a1f4b164d2dff3fd064abaf5a83b82c7fc304b3e0354b57953f9ee95a3adb713a0851eb64e6c6fa94e7973f2740024d03147bf958fb1a9a7343d931

    • SSDEEP

      49152:6cT+4Ppzg5xTe2QvAr05U+bFdvOy/rzBgmW2I0/9T8vEbZr4APmpGQKf7azauWtg:6A3PpE5U2QvkeU+J/9t7PcjBSA

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks