General

  • Target

    https://github.com/bick11undead/Hamster-kombat-farm-auto-bot/releases/download/Download_last_version/Hamster_bot.zip

  • Sample

    240528-w9cqcafd6t

Score
10/10

Malware Config

Extracted

Credentials

  • Protocol:
    ftp
  • Host:
    146.19.207.14
  • Port:
    21
  • Username:
    anonymous
  • Password:
    anonymous@

Extracted

Family

lumma

C2

https://varianntyfeecterd.shop/api

https://horsedwollfedrwos.shop/api

https://patternapplauderw.shop/api

https://understanndtytonyguw.shop/api

https://considerrycurrentyws.shop/api

https://messtimetabledkolvk.shop/api

https://detailbaconroollyws.shop/api

https://deprivedrinkyfaiir.shop/api

https://relaxtionflouwerwi.shop/api

Targets

    • Target

      https://github.com/bick11undead/Hamster-kombat-farm-auto-bot/releases/download/Download_last_version/Hamster_bot.zip

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks