General

  • Target

    https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqa3o2ajVHTzVjalJNMURIWG5VQmtFS0gycXJzZ3xBQ3Jtc0trTmpXOGttQ0JmYmxXcXU5ZmpoYXYyUFJqSlYwVjlQcGhfSDRBZW1tUWd4Vl9yTWpjWndOU3ZDSGtlTzlEVWswWG5LQTI3eVJLcGtScmNiWElnYmx5QlVPTEhKUFoxV05tenBqbUpQd2xmN2ZMamN5TQ&q=https%3A%2F%2Fwww.mediafire.com%2Ffolder%2Ftsv8npnxv0sdf%2FAquantia_Loader&v=zzHlc_nIyeA

  • Sample

    240811-g8s9daserg

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://writerospzm.shop/api

https://deallerospfosu.shop/api

https://bassizcellskz.shop/api

https://mennyudosirso.shop/api

https://languagedscie.shop/api

https://complaintsipzzx.shop/api

https://quialitsuzoxm.shop/api

https://tenntysjuxmz.shop/api

Targets

    • Target

      https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqa3o2ajVHTzVjalJNMURIWG5VQmtFS0gycXJzZ3xBQ3Jtc0trTmpXOGttQ0JmYmxXcXU5ZmpoYXYyUFJqSlYwVjlQcGhfSDRBZW1tUWd4Vl9yTWpjWndOU3ZDSGtlTzlEVWswWG5LQTI3eVJLcGtScmNiWElnYmx5QlVPTEhKUFoxV05tenBqbUpQd2xmN2ZMamN5TQ&q=https%3A%2F%2Fwww.mediafire.com%2Ffolder%2Ftsv8npnxv0sdf%2FAquantia_Loader&v=zzHlc_nIyeA

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks