General
-
Target
https://github.com/Many3RRORS/SKRIPT-GG/blob/main/SkriptGG.exe
-
Sample
241121-bjag3sxlhz
Score
10/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://github.com/Many3RRORS/SKRIPT-GG/blob/main/SkriptGG.exe
Resource
win11-20241007-en
windows11-21h2-x64
20 signatures
300 seconds
Malware Config
Extracted
Family
lumma
C2
https://covvercilverow.shop/api
https://surroundeocw.shop/api
https://abortinoiwiam.shop/api
https://pumpkinkwquo.shop/api
https://priooozekw.shop/api
https://deallyharvenw.shop/api
https://defenddsouneuw.shop/api
https://racedsuitreow.shop/api
https://roaddrermncomplai.shop/api
Targets
-
-
Target
https://github.com/Many3RRORS/SKRIPT-GG/blob/main/SkriptGG.exe
Score10/10-
Lumma family
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-
Suspicious use of SetThreadContext
-