General

  • Target

    https://mega.nz/file/3nZHGYgA#SZZy9ABTHHkPRL_S-mKpQE61IoShuYhVxNt84REZlr8?6743f2db9ebd4_6743f2db9ebd8&sdm=d1fd9e3d65c9858ccfe557c05b602dda2ea7b830

  • Sample

    241125-ebx5yssnhk

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://peacefulmind.shop/api

Targets

    • Target

      https://mega.nz/file/3nZHGYgA#SZZy9ABTHHkPRL_S-mKpQE61IoShuYhVxNt84REZlr8?6743f2db9ebd4_6743f2db9ebd8&sdm=d1fd9e3d65c9858ccfe557c05b602dda2ea7b830

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Executes dropped EXE

    • Blocklisted process makes network request

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks