General
- Target https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbEEwRzliMHRPOENJWEZBdnFDOThkMkEtMDZXd3xBQ3Jtc0trY2tWZ3pvR2gxVUd1TVNSemFpYlFiWFFQV1lZUTJuMFVkNWlOSHlBb2tnQXNMQnNDc1JHeHpGYjBlWG4zSW1jVGZ5NlppQk5qbkpQejlZak5iOHNmV1dEV01WLWx5bXZXUEZOdzV1SVZuUWQ0MktSQQ&q=https%3A%2F%2Fapp.mediafire.com%2Ff169cqy6jf7l3&v=tYEfOijBLcM
- Sample240703-m6dc2azapd
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbEEwRzliMHRPOENJWEZBdnFDOThkMkEtMDZXd3xBQ3Jtc0trY2tWZ3pvR2gxVUd1TVNSemFpYlFiWFFQV1lZUTJuMFVkNWlOSHlBb2tnQXNMQnNDc1JHeHpGYjBlWG4zSW1jVGZ5NlppQk5qbkpQejlZak5iOHNmV1dEV01WLWx5bXZXUEZOdzV1SVZuUWQ0MktSQQ&q=https%3A%2F%2Fapp.mediafire.com%2Ff169cqy6jf7l3&v=tYEfOijBLcM
Resource
win10v2004-20240508-en
14 signatures
600 seconds
Malware Config
Extracted
Family
-
lumma
C2
-
https://citizencenturygoodwk.shop/api
-
https://potterryisiw.shop/api
-
https://foodypannyjsud.shop/api
-
https://contintnetksows.shop/api
-
https://reinforcedirectorywd.shop/api
Targets
-
- Target https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbEEwRzliMHRPOENJWEZBdnFDOThkMkEtMDZXd3xBQ3Jtc0trY2tWZ3pvR2gxVUd1TVNSemFpYlFiWFFQV1lZUTJuMFVkNWlOSHlBb2tnQXNMQnNDc1JHeHpGYjBlWG4zSW1jVGZ5NlppQk5qbkpQejlZak5iOHNmV1dEV01WLWx5bXZXUEZOdzV1SVZuUWQ0MktSQQ&q=https%3A%2F%2Fapp.mediafire.com%2Ff169cqy6jf7l3&v=tYEfOijBLcM
Suspicious use of SetThreadContext