lumma | hxxps://download1336[.]mediafire[.]com/djmucqqhmlygt2c6WPsoEzvft-5Uu-px38Yet8TMwdSUnpM358r0vu1ZmE32eds3D4i9gtaKsff9e1DSv6-d056TeEDAKVxE6HUzzDtjRjj2qlTNERw2F1ExCQge9WZKuzuF7Qi-vwX-vA0QNU2ruNgOH8CayAYaHk_kItUa3Jyq/cjd5f2wrmuicok0/S0Lar5u9y43g821r43[.]zip

General

Target

https://download1336.mediafire.com/djmucqqhmlygt2c6WPsoEzvft-5Uu-px38Yet8TMwdSUnpM358r0vu1ZmE32eds3D4i9gtaKsff9e1DSv6-d056TeEDAKVxE6HUzzDtjRjj2qlTNERw2F1ExCQge9WZKuzuF7Qi-vwX-vA0QNU2ruNgOH8CayAYaHk_kItUa3Jyq/cjd5f2wrmuicok0/S0Lar5u9y43g821r43.zip
Sample

240712-rylrnaxgjr

Score

10^/10

lumma stealer

Malware Config

Extracted

Family

lumma

C2

https://bannngwko.shop/api

https://bargainnykwo.shop/api

https://affecthorsedpo.shop/api

https://radiationnopp.shop/api

https://answerrsdo.shop/api

https://publicitttyps.shop/api

https://benchillppwo.shop/api

https://reinforcedirectorywd.shop/api

Targets

- Target
  
  https://download1336.mediafire.com/djmucqqhmlygt2c6WPsoEzvft-5Uu-px38Yet8TMwdSUnpM358r0vu1ZmE32eds3D4i9gtaKsff9e1DSv6-d056TeEDAKVxE6HUzzDtjRjj2qlTNERw2F1ExCQge9WZKuzuF7Qi-vwX-vA0QNU2ruNgOH8CayAYaHk_kItUa3Jyq/cjd5f2wrmuicok0/S0Lar5u9y43g821r43.zip
Score

10^/10

lumma stealer
- Lumma Stealer
  An infostealer written in C++ first seen in August 2022.
  stealer lumma
- Executes dropped EXE
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

Query Registry

System Information Discovery

2

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Lumma Stealer

Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks

static1

urlscan1

behavioral1