Overview

overview

10

Static

static

1

URLScan

urlscan

1

https://apocalypsech...

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    https://apocalypsecheats.fun/app/Apocal%D1%83ps%D0%B5.zip

  • Sample

    240817-3h83sswdrj

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://disappearsodsz.shop/api

https://potentioallykeos.shop/api

https://interactiedovspm.shop/api

https://charecteristicdxp.shop/api

https://cagedwifedsozm.shop/api

https://deicedosmzj.shop/api

https://southedhiscuso.shop/api

https://consciousourwi.shop/api

https://weiggheticulop.shop/api

https://tenntysjuxmz.shop/api

Targets

    • Target

      https://apocalypsecheats.fun/app/Apocal%D1%83ps%D0%B5.zip

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks