General

  • Target

    https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbHpjTTNVTXdMbkhHMVRoQVdyZmxSNHNvbkt6UXxBQ3Jtc0tsQy1fbmpjTy14c2czOEg4OHQ2NmpzYllMM1IzRWNUTGlkM1h1X1dYUVZuTUwwWGY3YkxNZ2pCcTBTaUVhVUgtUEpueXQyVmxaTWVtVlJHaV9NbnU2aDNRR3Q5aGV1TUN5dlBYdUs1bFlVU0tmcmhpWQ&q=https%3A%2F%2Finsomniahack.fun%2F&v=PkS4At4B5DY

  • Sample

    240425-t6c6lacg2t

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://productivelookewr.shop/api

https://tolerateilusidjukl.shop/api

https://shatterbreathepsw.shop/api

https://shortsvelventysjo.shop/api

https://incredibleextedwj.shop/api

https://alcojoldwograpciw.shop/api

https://liabilitynighstjsko.shop/api

https://demonstationfukewko.shop/api

Targets

    • Target

      https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbHpjTTNVTXdMbkhHMVRoQVdyZmxSNHNvbkt6UXxBQ3Jtc0tsQy1fbmpjTy14c2czOEg4OHQ2NmpzYllMM1IzRWNUTGlkM1h1X1dYUVZuTUwwWGY3YkxNZ2pCcTBTaUVhVUgtUEpueXQyVmxaTWVtVlJHaV9NbnU2aDNRR3Q5aGV1TUN5dlBYdUs1bFlVU0tmcmhpWQ&q=https%3A%2F%2Finsomniahack.fun%2F&v=PkS4At4B5DY

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks