General
-
Target
https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbHFOMVhwRXM5UE9mUk5tMDVsRFh0eU9GcVZZd3xBQ3Jtc0trVFVZTkljSkt1YTFKS2RmVUI3U19VUndmZHBLNGowMlhSSkF6YUxVS0h3Y3NDN0xKV2NnYXNSM09Obm41VkVUUkF4RDUyZmV4NF8wRElnSU1jTTE5SE1NLWNveHphNklVNmItd3ZYNjFLbGhwTVhiWQ&q=https%3A%2F%2Fexitproj3ct.org%2F&v=krE8cgTYiGQ
-
Sample
240424-s4qhgacf9s
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbHFOMVhwRXM5UE9mUk5tMDVsRFh0eU9GcVZZd3xBQ3Jtc0trVFVZTkljSkt1YTFKS2RmVUI3U19VUndmZHBLNGowMlhSSkF6YUxVS0h3Y3NDN0xKV2NnYXNSM09Obm41VkVUUkF4RDUyZmV4NF8wRElnSU1jTTE5SE1NLWNveHphNklVNmItd3ZYNjFLbGhwTVhiWQ&q=https%3A%2F%2Fexitproj3ct.org%2F&v=krE8cgTYiGQ
Resource
win10v2004-20240412-en
Malware Config
Extracted
lumma
https://mazefearcontainujsy.shop/api
https://productivelookewr.shop/api
https://tolerateilusidjukl.shop/api
https://shatterbreathepsw.shop/api
https://shortsvelventysjo.shop/api
https://incredibleextedwj.shop/api
https://alcojoldwograpciw.shop/api
https://liabilitynighstjsko.shop/api
https://demonstationfukewko.shop/api
Targets
-
-
Target
https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbHFOMVhwRXM5UE9mUk5tMDVsRFh0eU9GcVZZd3xBQ3Jtc0trVFVZTkljSkt1YTFKS2RmVUI3U19VUndmZHBLNGowMlhSSkF6YUxVS0h3Y3NDN0xKV2NnYXNSM09Obm41VkVUUkF4RDUyZmV4NF8wRElnSU1jTTE5SE1NLWNveHphNklVNmItd3ZYNjFLbGhwTVhiWQ&q=https%3A%2F%2Fexitproj3ct.org%2F&v=krE8cgTYiGQ
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-