General

  • Target

    Software.exe

  • Size

    539KB

  • Sample

    250130-qky96asjhy

  • MD5

    cbe7b9d6485b1694a931f09f933f32c7

  • SHA1

    00c0269fd324522f28b7786f0063f730cc7202b4

  • SHA256

    f958b0936c1a9939c21ff59a81322c2ec5c38ec064d09ed75345685a152d2e1a

  • SHA512

    bb63626511091a23850e7af4c97e5727c2d75ac8cf0573fd8e83ba6ad18c3012a9dddc772b40ae6f9ea24c459f62e1f336fe154f4027cbe1bb4305cc484e5b8c

  • SSDEEP

    12288:qZkEb6EcwNbyLII2PDdKfJG+SOTGoZt6e:4by0JPm8iTlt6e

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

Targets

    • Target

      Software.exe

    • Size

      539KB

    • MD5

      cbe7b9d6485b1694a931f09f933f32c7

    • SHA1

      00c0269fd324522f28b7786f0063f730cc7202b4

    • SHA256

      f958b0936c1a9939c21ff59a81322c2ec5c38ec064d09ed75345685a152d2e1a

    • SHA512

      bb63626511091a23850e7af4c97e5727c2d75ac8cf0573fd8e83ba6ad18c3012a9dddc772b40ae6f9ea24c459f62e1f336fe154f4027cbe1bb4305cc484e5b8c

    • SSDEEP

      12288:qZkEb6EcwNbyLII2PDdKfJG+SOTGoZt6e:4by0JPm8iTlt6e

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks