Resubmissions

03-09-2024 01:10

240903-bjszestfqe 10

03-09-2024 01:07

240903-bgq22sseql 10

General

  • Target

    https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqa2lEU3o4OG1SMHV0aTk2NzRucXladmMza3dVd3xBQ3Jtc0tsdHgtNzBOZUs1ZTdNMVh1Y21acFZpVFNDdnBHc194d1lMQ0lvNEp3bmhiSEFLZDhieXlnbE9OUk5QUFdBMXNtM1NSaW4xWEY2anpTT084aEppVTVIVDBSWGxhZF80amxzeXpIOTI4eVItZGd1RXlaRQ&q=https%3A%2F%2Fapocalypsecheats.fun%2F&v=amIwtAA4HhU

  • Sample

    240903-bjszestfqe

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://securedosqpsn.shop/api

https://locatedblsoqp.shop/api

Targets

    • Target

      https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqa2lEU3o4OG1SMHV0aTk2NzRucXladmMza3dVd3xBQ3Jtc0tsdHgtNzBOZUs1ZTdNMVh1Y21acFZpVFNDdnBHc194d1lMQ0lvNEp3bmhiSEFLZDhieXlnbE9OUk5QUFdBMXNtM1NSaW4xWEY2anpTT084aEppVTVIVDBSWGxhZF80amxzeXpIOTI4eVItZGd1RXlaRQ&q=https%3A%2F%2Fapocalypsecheats.fun%2F&v=amIwtAA4HhU

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks