General

  • Target

    bobpaertw.exe

  • Size

    1.2MB

  • Sample

    250130-tybmsswnfw

  • MD5

    82b458869553d5314ec2d7bcecd8d380

  • SHA1

    541fc9fb1384ffc8e1f024695a7eace668ad5ec6

  • SHA256

    fd4203e487f88fd893d2c2ce3dd1ddea934c93d8f29cae146cdadab813bee7d5

  • SHA512

    6551dcdad84a019bedf104a8862a28c712ce8758c54df189583f0763ed93062ca2918cef290f619efeda15bd8091096671b425ea7f9f3e4bbaae47297d5529d8

  • SSDEEP

    24576:Kz+4m049oysLMVSH21j2F0pCXU3Z7R+XVbrY/WeEaPkTJcBC7qVR:bT0co/oUH2A1X4D+Fg/WtNcB6qz

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://kitestarepatt.click/api

https://toppyneedus.biz/api

Targets

    • Target

      bobpaertw.exe

    • Size

      1.2MB

    • MD5

      82b458869553d5314ec2d7bcecd8d380

    • SHA1

      541fc9fb1384ffc8e1f024695a7eace668ad5ec6

    • SHA256

      fd4203e487f88fd893d2c2ce3dd1ddea934c93d8f29cae146cdadab813bee7d5

    • SHA512

      6551dcdad84a019bedf104a8862a28c712ce8758c54df189583f0763ed93062ca2918cef290f619efeda15bd8091096671b425ea7f9f3e4bbaae47297d5529d8

    • SSDEEP

      24576:Kz+4m049oysLMVSH21j2F0pCXU3Z7R+XVbrY/WeEaPkTJcBC7qVR:bT0co/oUH2A1X4D+Fg/WtNcB6qz

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks