Resubmissions

25-11-2024 01:38

241125-b2lcasxjfm 10

25-11-2024 01:34

241125-bzd57swrek 6

General

  • Target

    https://github.com/cranki-s/ragemp-serverdumps/tree/main/GrandRP%20DE

  • Sample

    241125-b2lcasxjfm

Malware Config

Extracted

Family

lumma

C2

https://covvercilverow.shop/api

https://surroundeocw.shop/api

https://abortinoiwiam.shop/api

https://pumpkinkwquo.shop/api

https://priooozekw.shop/api

https://deallyharvenw.shop/api

https://defenddsouneuw.shop/api

https://racedsuitreow.shop/api

https://roaddrermncomplai.shop/api

Targets

    • Target

      https://github.com/cranki-s/ragemp-serverdumps/tree/main/GrandRP%20DE

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • A potential corporate email address has been identified in the URL: crate@3

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks