Resubmissions

08/07/2024, 07:03

240708-hvcvxazelc10

08/07/2024, 07:01

240708-htd2ksxfnr1

General

  • Target
    https://github.com/eul3nd/eulen-cheate-fivem/archive/refs/heads/main.zip
  • Sample240708-hvcvxazelc
Score
10/10

Malware Config

Extracted

Family
  • lumma

C2
  • https://extorteauhhwigw.shop/api

Targets

    • Target
      https://github.com/eul3nd/eulen-cheate-fivem/archive/refs/heads/main.zip
    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Executes dropped EXE

    • Loads dropped DLL

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks