General

  • Target

    https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbTFDc3B2N25iMUdtUTlaUXVoTVEtRWZQOEF0d3xBQ3Jtc0tuaVlhZGt6b3VGdjE1aWk4clF1Z09KTDByblo4enRtUTh3dmhaY2tkV2t5T0VYOC1BQlFVUmVQbG1lNUVOSTdsdTVlU2FMcmZvZTc2Tjd0VXcyQjZnOHB4c0dxajc5cFNLRktWWGJ0M0RBU3NTTmJsMA&q=https%3A%2F%2Faio-cheats.framer.website%2F&v=Py8xfqmLnRQ

  • Sample

    240424-q1rv1sah61

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://productivelookewr.shop/api

https://tolerateilusidjukl.shop/api

https://shatterbreathepsw.shop/api

https://shortsvelventysjo.shop/api

https://incredibleextedwj.shop/api

https://alcojoldwograpciw.shop/api

https://liabilitynighstjsko.shop/api

https://demonstationfukewko.shop/api

Targets

    • Target

      https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbTFDc3B2N25iMUdtUTlaUXVoTVEtRWZQOEF0d3xBQ3Jtc0tuaVlhZGt6b3VGdjE1aWk4clF1Z09KTDByblo4enRtUTh3dmhaY2tkV2t5T0VYOC1BQlFVUmVQbG1lNUVOSTdsdTVlU2FMcmZvZTc2Tjd0VXcyQjZnOHB4c0dxajc5cFNLRktWWGJ0M0RBU3NTTmJsMA&q=https%3A%2F%2Faio-cheats.framer.website%2F&v=Py8xfqmLnRQ

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks