General
-
Target
https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbTFDc3B2N25iMUdtUTlaUXVoTVEtRWZQOEF0d3xBQ3Jtc0tuaVlhZGt6b3VGdjE1aWk4clF1Z09KTDByblo4enRtUTh3dmhaY2tkV2t5T0VYOC1BQlFVUmVQbG1lNUVOSTdsdTVlU2FMcmZvZTc2Tjd0VXcyQjZnOHB4c0dxajc5cFNLRktWWGJ0M0RBU3NTTmJsMA&q=https%3A%2F%2Faio-cheats.framer.website%2F&v=Py8xfqmLnRQ
-
Sample
240424-q1rv1sah61
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbTFDc3B2N25iMUdtUTlaUXVoTVEtRWZQOEF0d3xBQ3Jtc0tuaVlhZGt6b3VGdjE1aWk4clF1Z09KTDByblo4enRtUTh3dmhaY2tkV2t5T0VYOC1BQlFVUmVQbG1lNUVOSTdsdTVlU2FMcmZvZTc2Tjd0VXcyQjZnOHB4c0dxajc5cFNLRktWWGJ0M0RBU3NTTmJsMA&q=https%3A%2F%2Faio-cheats.framer.website%2F&v=Py8xfqmLnRQ
Resource
win10v2004-20240226-en
Malware Config
Extracted
lumma
https://productivelookewr.shop/api
https://tolerateilusidjukl.shop/api
https://shatterbreathepsw.shop/api
https://shortsvelventysjo.shop/api
https://incredibleextedwj.shop/api
https://alcojoldwograpciw.shop/api
https://liabilitynighstjsko.shop/api
https://demonstationfukewko.shop/api
Targets
-
-
Target
https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbTFDc3B2N25iMUdtUTlaUXVoTVEtRWZQOEF0d3xBQ3Jtc0tuaVlhZGt6b3VGdjE1aWk4clF1Z09KTDByblo4enRtUTh3dmhaY2tkV2t5T0VYOC1BQlFVUmVQbG1lNUVOSTdsdTVlU2FMcmZvZTc2Tjd0VXcyQjZnOHB4c0dxajc5cFNLRktWWGJ0M0RBU3NTTmJsMA&q=https%3A%2F%2Faio-cheats.framer.website%2F&v=Py8xfqmLnRQ
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-