Overview

overview

10

Static

static

1

URLScan

urlscan

1

https://game.emilieb...

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    https://game.emilieboucher.fr/content/fix.html
  • Sample240614-y3mcbayapp
Score
10/10
lummaexecutionstealer

Malware Config

Extracted

Family

  • lumma

C2

  • https://swingcirculateblsdi.shop/api

  • https://marathonbeedksow.shop/api

  • https://feighminoritsjda.shop/api

  • https://pleasurenarrowsdla.shop/api

  • https://falseaudiencekd.shop/api

  • https://raiseboltskdlwpow.shop/api

  • https://justifycanddidatewd.shop/api

  • https://strwawrunnygjwu.shop/api

  • https://richardflorespoew.shop/api

Targets

    • Target
      https://game.emilieboucher.fr/content/fix.html
    Score
    10/10
    lummaexecutionstealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks