General

  • Target

    loader.exe

  • Size

    545KB

  • Sample

    250130-rphnmstlev

  • MD5

    979de771eb4ff270e0348eb4832fd28e

  • SHA1

    41b8177bf912dd148ce33d0f89479a684cc3dddf

  • SHA256

    bd19b230e4650d53868b2a5adb9b4cac495b06c6880ee3fd7e3fa87adbb9a282

  • SHA512

    210842e3a5247ee2f95c9c4b234059354b43b275756c2b8f4c0fdd0bb6b5107ff44ca27a8cb9a14ef94c8d8769ad4341f542a3d9d9b88c54950a2689924d34e7

  • SSDEEP

    12288:lZkEb6EcwNby2j0jZ5hQ0CCpvQJYo2lxrxPNP2:Lby2juZM0V82f1PNO

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

Targets

    • Target

      loader.exe

    • Size

      545KB

    • MD5

      979de771eb4ff270e0348eb4832fd28e

    • SHA1

      41b8177bf912dd148ce33d0f89479a684cc3dddf

    • SHA256

      bd19b230e4650d53868b2a5adb9b4cac495b06c6880ee3fd7e3fa87adbb9a282

    • SHA512

      210842e3a5247ee2f95c9c4b234059354b43b275756c2b8f4c0fdd0bb6b5107ff44ca27a8cb9a14ef94c8d8769ad4341f542a3d9d9b88c54950a2689924d34e7

    • SSDEEP

      12288:lZkEb6EcwNby2j0jZ5hQ0CCpvQJYo2lxrxPNP2:Lby2juZM0V82f1PNO

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks