Resubmissions

05/07/2024, 17:36

240705-v638fssdlj

05/07/2024, 17:33

240705-v43txavdkd10

General

  • Target
    https://github.com/TheresiaAurelly/Solara-executor?tab=readme-ov-file
  • Sample240705-v43txavdkd
Score
10/10

Malware Config

Extracted

Family
  • lumma

C2
  • https://bannngwko.shop/api

Targets

    • Target
      https://github.com/TheresiaAurelly/Solara-executor?tab=readme-ov-file
    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks