General

  • Target

    random.exe

  • Size

    465KB

  • Sample

    250129-rp47msylhr

  • MD5

    8ef91a0832f26ef03ba04fc0503ea6ca

  • SHA1

    5e79b2d9b66df06ae4a161990cd411f255e5b612

  • SHA256

    88be9326e3346393b29458adc255487af80b27397cb51b81998f310e3e5bd581

  • SHA512

    2746f29d1c53075dc5844cc1a85c2139a8168533777bcdab01d81f729ceace438a19aa8e8835171507c544c35a8c9ba8b46e34600e2009cf1c758e53ca82297f

  • SSDEEP

    6144:VKghTpr9EVw+yNv9WBdJz147ZdyNNaTgW1aGSqbZCLnrCpIZl1iatmr5bNLsw6j5:jpryyS5z14+NYUCaEZCbBLzY7sRiCl

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

Targets

    • Target

      random.exe

    • Size

      465KB

    • MD5

      8ef91a0832f26ef03ba04fc0503ea6ca

    • SHA1

      5e79b2d9b66df06ae4a161990cd411f255e5b612

    • SHA256

      88be9326e3346393b29458adc255487af80b27397cb51b81998f310e3e5bd581

    • SHA512

      2746f29d1c53075dc5844cc1a85c2139a8168533777bcdab01d81f729ceace438a19aa8e8835171507c544c35a8c9ba8b46e34600e2009cf1c758e53ca82297f

    • SSDEEP

      6144:VKghTpr9EVw+yNv9WBdJz147ZdyNNaTgW1aGSqbZCLnrCpIZl1iatmr5bNLsw6j5:jpryyS5z14+NYUCaEZCbBLzY7sRiCl

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks