General

  • Target

    2025-01-31_bf015edca4fa189c6f63d6fde21ceb89_frostygoop_poet-rat_snatch

  • Size

    8.6MB

  • Sample

    250131-gnc2na1lel

  • MD5

    bf015edca4fa189c6f63d6fde21ceb89

  • SHA1

    8be55ca5a671c97c871afe8ce6e967149e4a2743

  • SHA256

    f2eb847110421c73324a98574940741c2dbf03863cedaf34df4e85fcf084751c

  • SHA512

    ec6f1968ab7895a707c9a18534c2e6c3eab76642c67e31c95586af8d1fae9e97821e64a4ac47ce027701caf638d189a1f06f5f8ad07a122eee30ff9cf08c37e3

  • SSDEEP

    49152:5bB5CXZxWxS6fToCa1JJly9m7xEsB/5+stMMv8Kr3PjtPE8E2DhP8qTg3+Ufv8Cc:5bb8sSes1JJ2WOsDvvN++0rOhJCOUC9

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

Targets

    • Target

      2025-01-31_bf015edca4fa189c6f63d6fde21ceb89_frostygoop_poet-rat_snatch

    • Size

      8.6MB

    • MD5

      bf015edca4fa189c6f63d6fde21ceb89

    • SHA1

      8be55ca5a671c97c871afe8ce6e967149e4a2743

    • SHA256

      f2eb847110421c73324a98574940741c2dbf03863cedaf34df4e85fcf084751c

    • SHA512

      ec6f1968ab7895a707c9a18534c2e6c3eab76642c67e31c95586af8d1fae9e97821e64a4ac47ce027701caf638d189a1f06f5f8ad07a122eee30ff9cf08c37e3

    • SSDEEP

      49152:5bB5CXZxWxS6fToCa1JJly9m7xEsB/5+stMMv8Kr3PjtPE8E2DhP8qTg3+Ufv8Cc:5bb8sSes1JJ2WOsDvvN++0rOhJCOUC9

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks