General

  • Target
    https://github.com/pootiegirmest90/pootiegirmest90/releases/download/lat/Git_softwares_v1_6_8.7z
  • Sample240524-rmlyaahb42
Score
10/10

Malware Config

Extracted

Family
  • lumma

C2
  • https://uncertaintyrestsju.shop/api

  • https://museumtespaceorsp.shop/api

  • https://buttockdecarderwiso.shop/api

  • https://averageaattractiionsl.shop/api

  • https://femininiespywageg.shop/api

  • https://employhabragaomlsp.shop/api

  • https://stalfbaclcalorieeis.shop/api

  • https://civilianurinedtsraov.shop/api

  • https://roomabolishsnifftwk.shop/api

Targets

    • Target
      https://github.com/pootiegirmest90/pootiegirmest90/releases/download/lat/Git_softwares_v1_6_8.7z
    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks