General

  • Target

    FileZilla.exe

  • Size

    7.2MB

  • Sample

    250130-sgnqcswqdk

  • MD5

    918e047b10406de6800a08b5371fa1f1

  • SHA1

    4a622107863063db735d3965b2d59c935c6b0850

  • SHA256

    552d75f30ac9574391c0f9e0602efcc24d494a118da7eb27310fb3a48314ddfa

  • SHA512

    ea49ac5b2a8c565fb81208f5e367bca9f65a97ab5a7473833de7ed33b9bf539013667ec808714ba913d68a56136370e7b78af363275f5fb2f63948a41d2f632e

  • SSDEEP

    49152:Id+YSEnLRdsmOdjmkxmdf6GtQLAhaYSKiNy4kpU0ycC:4+YSEnNdiBP

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://greatrabbid.biz/api

https://toppyneedus.biz/api

Targets

    • Target

      FileZilla.exe

    • Size

      7.2MB

    • MD5

      918e047b10406de6800a08b5371fa1f1

    • SHA1

      4a622107863063db735d3965b2d59c935c6b0850

    • SHA256

      552d75f30ac9574391c0f9e0602efcc24d494a118da7eb27310fb3a48314ddfa

    • SHA512

      ea49ac5b2a8c565fb81208f5e367bca9f65a97ab5a7473833de7ed33b9bf539013667ec808714ba913d68a56136370e7b78af363275f5fb2f63948a41d2f632e

    • SSDEEP

      49152:Id+YSEnLRdsmOdjmkxmdf6GtQLAhaYSKiNy4kpU0ycC:4+YSEnNdiBP

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

MITRE ATT&CK Enterprise v15

Tasks