General

  • Target

    https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbjBnLVhnMlBZaEl5OXZKazI5TFdTY1hnaVpId3xBQ3Jtc0ttbFlocUF2c1Judi1hQU14RXdOQkROUnlfSW8tTGZON3VnUjNnTS13YTkxalNSS3RtSTU4bWFrTzZ3LWZfc2l3bkdwN2htajV6MTJBUXlERm9FSlZQbjZNQnJ2YXltRUI2UlRMTXRyN2xKX05Rd2ZETQ&q=https%3A%2F%2Fwww.mediafire.com%2Ffolder%2Fcw22ddzcgxqqx%2FPASS-1234&v=38pzwUM31LA

  • Sample

    240823-vzb6dszcpm

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://partyyeisdo.shop/api

https://potentioallykeos.shop/api

Targets

    • Target

      https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbjBnLVhnMlBZaEl5OXZKazI5TFdTY1hnaVpId3xBQ3Jtc0ttbFlocUF2c1Judi1hQU14RXdOQkROUnlfSW8tTGZON3VnUjNnTS13YTkxalNSS3RtSTU4bWFrTzZ3LWZfc2l3bkdwN2htajV6MTJBUXlERm9FSlZQbjZNQnJ2YXltRUI2UlRMTXRyN2xKX05Rd2ZETQ&q=https%3A%2F%2Fwww.mediafire.com%2Ffolder%2Fcw22ddzcgxqqx%2FPASS-1234&v=38pzwUM31LA

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks