Resubmissions

26/12/2024, 12:33

241226-pq936swkbl 10

26/12/2024, 12:21

241226-pjphwsvrgp 10

26/12/2024, 12:12

241226-pdcbdavpax 10

23/12/2024, 17:23

241223-vyh8bawkdz 10

23/12/2024, 17:02

241223-vj7x5avqfs 7

23/12/2024, 16:41

241223-t6493svnav 10

23/12/2024, 16:30

241223-tz4d7svldy 4

23/12/2024, 16:09

241223-tl5ecatrcv 10

22/12/2024, 23:42

241222-3qhwksskhk 6

22/12/2024, 23:31

241222-3hxprssjgm 10

General

  • Target

    https://youtube.com

  • Sample

    241223-t6493svnav

Malware Config

Extracted

Family

lumma

C2

https://brendon-sharjen.biz/api

Extracted

Family

lumma

C2

https://brendon-sharjen.biz/api

Targets

    • Target

      https://youtube.com

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • CryptOne packer

      Detects CryptOne packer defined in NCC blogpost.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks