General

  • Target

    Installer.exe

  • Size

    534KB

  • Sample

    250130-ydydaa1jdv

  • MD5

    3e0425febb1dab14a9c10b27bbba983a

  • SHA1

    95c4e5e0434161282e2c814910c7d31078c07ad7

  • SHA256

    76329179e59265943bcded2afa641b2ab7991cb46ec56aaa6338d4ab455c4098

  • SHA512

    0414066a1d1e66db4e0c713679ba18b868a75652a2a415e1a7af5fc4bede762a3c33f7112d1f9fb67c78b2af533d51c3a3b7b2fe8cc54918b1049d6b8d2696c3

  • SSDEEP

    12288:CZkEb6EcwNbyvi1bWSKAMZpGiac5D3YM8hOe96NMyuhVbN6G:AbyvmWSKADiaA3YjEe96NM5Vh

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

Targets

    • Target

      Installer.exe

    • Size

      534KB

    • MD5

      3e0425febb1dab14a9c10b27bbba983a

    • SHA1

      95c4e5e0434161282e2c814910c7d31078c07ad7

    • SHA256

      76329179e59265943bcded2afa641b2ab7991cb46ec56aaa6338d4ab455c4098

    • SHA512

      0414066a1d1e66db4e0c713679ba18b868a75652a2a415e1a7af5fc4bede762a3c33f7112d1f9fb67c78b2af533d51c3a3b7b2fe8cc54918b1049d6b8d2696c3

    • SSDEEP

      12288:CZkEb6EcwNbyvi1bWSKAMZpGiac5D3YM8hOe96NMyuhVbN6G:AbyvmWSKADiaA3YjEe96NM5Vh

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks