General

  • Target

    random.exe

  • Size

    530KB

  • Sample

    250131-we5smsspbx

  • MD5

    3e24b5c245488779f5e6d568a99fc0a9

  • SHA1

    f7da8983de091aa10db6700631f860305e5263e5

  • SHA256

    6fe08566aa76bce7b557f9d3d4501b5ca7b3cfda46188454a1199cda4d07316d

  • SHA512

    909f3d5edb69d4709a95c46dd72d8fedc3c33a311ea95230ddf417b38739827cd6b416324faefafe7b8f3be2b30da0c2f4cb4041ffbfa105aa1040aad23080ab

  • SSDEEP

    12288:CZkEb6EcwNbyhw+X9rKMGQkrXLfDR35dUlg:AbyhwwrTuXDDR3bUa

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

Targets

    • Target

      random.exe

    • Size

      530KB

    • MD5

      3e24b5c245488779f5e6d568a99fc0a9

    • SHA1

      f7da8983de091aa10db6700631f860305e5263e5

    • SHA256

      6fe08566aa76bce7b557f9d3d4501b5ca7b3cfda46188454a1199cda4d07316d

    • SHA512

      909f3d5edb69d4709a95c46dd72d8fedc3c33a311ea95230ddf417b38739827cd6b416324faefafe7b8f3be2b30da0c2f4cb4041ffbfa105aa1040aad23080ab

    • SSDEEP

      12288:CZkEb6EcwNbyhw+X9rKMGQkrXLfDR35dUlg:AbyhwwrTuXDDR3bUa

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks