General
Static task
static1
URLScan task
urlscan1
Malware Config
Extracted
Family
lumma
Extracted
Family
cryptbot
C2
tventyvd20vt.top
analforeverlovyu.top
Attributes
-
url_path
/v1/upload.php
Targets
-
-
Target
https://bazaar.abuse.ch/sample/9b985f2af040a18f231b1c4851365e8f10a5ef394f455306fdc8f395b374f01e/
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
MITRE ATT&CK Enterprise v15
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1