Overview

overview

10

Static

static

1

URLScan

urlscan

1

https://ryosx.cc

windows10-2004-x64

10

Resubmissions

26/05/2024, 03:32

240526-d3yp5aea8610

22/05/2024, 22:59

240522-2yrb9acc8310

22/05/2024, 22:58

240522-2x3c5acc581

22/05/2024, 22:30

240522-2e7vwsbd995

Sharing

Copy URL Twitter E-mail

General

  • Target
    https://ryosx.cc
  • Sample240526-d3yp5aea86
Score
10/10
lummastealer

Malware Config

Extracted

Family

  • lumma

C2

  • https://employeedscratshj.shop/api

  • https://museumtespaceorsp.shop/api

  • https://buttockdecarderwiso.shop/api

  • https://averageaattractiionsl.shop/api

  • https://femininiespywageg.shop/api

  • https://employhabragaomlsp.shop/api

  • https://stalfbaclcalorieeis.shop/api

  • https://civilianurinedtsraov.shop/api

  • https://roomabolishsnifftwk.shop/api

Targets

    • Target
      https://ryosx.cc
    Score
    10/10
    lummastealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks