General
Static task
static1
URLScan task
urlscan1
Malware Config
Extracted
Family
lumma
C2
https://pedestriankodwu.xyz/api
https://towerxxuytwi.xyz/api
https://ellaboratepwsz.xyz/api
https://penetratedpoopp.xyz/api
https://swellfrrgwwos.xyz/api
https://contintnetksows.shop/api
https://foodypannyjsud.shop/api
https://potterryisiw.shop/api
https://extorteauhhwigw.shop/api
Targets
-
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-
Suspicious use of SetThreadContext