General

  • Target

    test.zip

  • Size

    7.4MB

  • Sample

    250130-vplbbaxme1

  • MD5

    0ea157265e585a655b14a2a9346316dc

  • SHA1

    bf7792db29c8fd80dc4956eeded1c8dada4f1e48

  • SHA256

    4036ba61a306b78901386e1599d6c3b35694f3deb105fbe5e04fc142967c7b83

  • SHA512

    6cf154d6691c836d52c36d21eae55a769f40ec10ac672c3e28f844a4e99cc5bc18bb9395cbcf1d141f3daf5b63852988e1edef0967bc7cef9b3ef8dd9018347b

  • SSDEEP

    196608:kFZxIWoZJoDQU3euBTru7hzMvJnGusHu81ALByUUnzz:OKqMU3euEugyLCz

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

Targets

    • Target

      test.zip

    • Size

      7.4MB

    • MD5

      0ea157265e585a655b14a2a9346316dc

    • SHA1

      bf7792db29c8fd80dc4956eeded1c8dada4f1e48

    • SHA256

      4036ba61a306b78901386e1599d6c3b35694f3deb105fbe5e04fc142967c7b83

    • SHA512

      6cf154d6691c836d52c36d21eae55a769f40ec10ac672c3e28f844a4e99cc5bc18bb9395cbcf1d141f3daf5b63852988e1edef0967bc7cef9b3ef8dd9018347b

    • SSDEEP

      196608:kFZxIWoZJoDQU3euBTru7hzMvJnGusHu81ALByUUnzz:OKqMU3euEugyLCz

    Score
    1/10
    • Target

      RelsUDP/BoostrappersUI.exe

    • Size

      1.1MB

    • MD5

      2fe89900828dc84a03c4545f9f2a8b0d

    • SHA1

      935079d71950de8164cc3557f8046ec29d3545a1

    • SHA256

      e69a4795c99bfe32a29279fe98a86cbfe0e2dca88c7b52d193bf98b91318dc2c

    • SHA512

      c78674b1c623955ae24dc21c7eba8509f543826c88110f0aaa8dcab06f6a2d3d7aa0ec7e9a621765567eeabad473b54a851873ec6093f3856a5997aa01b0b875

    • SSDEEP

      24576:I2685usQd1E0pGdiboQEYGTp786AM9Dpd/XJGEdKHIZ94D1j+:L68ssQd5pGsbtZmp9DvSowx+

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks