General

  • Target

    freeh.zip

  • Size

    11.1MB

  • Sample

    250129-rwhbfs1lbs

  • MD5

    d0abe41eba880bdea3416e22a6fbdb59

  • SHA1

    fb03bae419d5b9be57e8c176351879d8d39b40b3

  • SHA256

    d5f7914a93766c8a1946e34388e0a35433e489ecca12a43cc8b5af1b01028b39

  • SHA512

    6fa92d9ceb18bb488753b669e0390acc574f591d971fd0d68bbf310584c9e95080b22bc00c367a476710ca7e0a363e2ea2fb2a93ef8fa358ce26bfe764f02b33

  • SSDEEP

    196608:O8JRMmbdIl7yhmJDxbl25uJDbPl6MvyVwtrSlAeKsl7IdOPfBIrS:56udIl7Xxbl25knyVwYlAeKs1OOuS

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

Targets

    • Target

      freeh.exe

    • Size

      11.1MB

    • MD5

      3ae58d01ddf868998a69cce47ba09835

    • SHA1

      eab8b2bf9fb8110d9e5f5242527a594888576106

    • SHA256

      d493b9b04b220831949c9cc49fa87c268e3327cefcc41d19c0dfc59f150c021b

    • SHA512

      c044e8f8f402697919042540b03aa4722367fa6f3bb1d1855cdd88ab13a02b7e4416d9945cc86a2381eb15b336b4c720c25972fbc3c7ed742ccbbc8916721884

    • SSDEEP

      12288:qprynNamom0VdpHJXdjn2yW4iH9+jPmQJP3lxTAvK:qpryvoX3pp1fW4RDmQJ/zTAC

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks