Resubmissions

07-09-2024 08:32

240907-kfhhysvbrn 10

General

  • Target

    https://www.youtube.com/redirect?event=comments&redir_token=QUFFLUhqa01uT2xLOXhzOUlGLUxOcWRqV2RhU21RbUxCd3xBQ3Jtc0tuN3RLQXNLaXVicTJoaUwwZHdzUTNNOThHcHBJNWp6eGRkNnk1YXIxZTZtb3g5Q2pYTDlOZ19vczJydTk4VXN1bHAzcXU0V2c2V0ttU2Q4TW04Y2NHMUo0dHVtNGVkNjJVTXJ3cDBqYWRpWnB5RThiWQ&q=https%3A%2F%2Fwww.mediafire.com%2Ffolder%2F7nb7e2soc8a6i%2FAdlLoader

  • Sample

    240907-kfhhysvbrn

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://condedqpwqm.shop/api

Targets

    • Target

      https://www.youtube.com/redirect?event=comments&redir_token=QUFFLUhqa01uT2xLOXhzOUlGLUxOcWRqV2RhU21RbUxCd3xBQ3Jtc0tuN3RLQXNLaXVicTJoaUwwZHdzUTNNOThHcHBJNWp6eGRkNnk1YXIxZTZtb3g5Q2pYTDlOZ19vczJydTk4VXN1bHAzcXU0V2c2V0ttU2Q4TW04Y2NHMUo0dHVtNGVkNjJVTXJ3cDBqYWRpWnB5RThiWQ&q=https%3A%2F%2Fwww.mediafire.com%2Ffolder%2F7nb7e2soc8a6i%2FAdlLoader

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks