General

  • Target

    Arcadia.exe

  • Size

    512KB

  • Sample

    250129-ra8araznfw

  • MD5

    3ef15046b94f9d359f066f84c740edde

  • SHA1

    5895a89064d57b7272dc0075838c48b2449da637

  • SHA256

    cec70d29baa94f9bccf2c4ebd4a0acd661413561129b1ae43ccc9b31ffef91aa

  • SHA512

    e4f94e513b1b6fa34108b1e1bd83950f16943e1262663d02d56f178f02b7926e9b72ac3cb3442a4ad2fafd9d02103d74993f5913a72a0c90108c4b122d38f3ee

  • SSDEEP

    12288:Pj/MhZMZ8xVm3Tywsu6jxfDV1OZzMqW97YZzGlt2EJNAJ:yuZ8fmOwsPfDV1Oc97G0AJ

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

Targets

    • Target

      Arcadia.exe

    • Size

      512KB

    • MD5

      3ef15046b94f9d359f066f84c740edde

    • SHA1

      5895a89064d57b7272dc0075838c48b2449da637

    • SHA256

      cec70d29baa94f9bccf2c4ebd4a0acd661413561129b1ae43ccc9b31ffef91aa

    • SHA512

      e4f94e513b1b6fa34108b1e1bd83950f16943e1262663d02d56f178f02b7926e9b72ac3cb3442a4ad2fafd9d02103d74993f5913a72a0c90108c4b122d38f3ee

    • SSDEEP

      12288:Pj/MhZMZ8xVm3Tywsu6jxfDV1OZzMqW97YZzGlt2EJNAJ:yuZ8fmOwsPfDV1Oc97G0AJ

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks