Resubmissions
26/12/2024, 12:33
241226-pq936swkbl 1026/12/2024, 12:21
241226-pjphwsvrgp 1026/12/2024, 12:12
241226-pdcbdavpax 1023/12/2024, 17:23
241223-vyh8bawkdz 1023/12/2024, 17:02
241223-vj7x5avqfs 723/12/2024, 16:41
241223-t6493svnav 1023/12/2024, 16:30
241223-tz4d7svldy 423/12/2024, 16:09
241223-tl5ecatrcv 1022/12/2024, 23:42
241222-3qhwksskhk 622/12/2024, 23:31
241222-3hxprssjgm 10General
Static task
static1
URLScan task
urlscan1
Malware Config
Extracted
Family
lumma
C2
https://spellshagey.biz/api
Targets
-
-
Lumma family
-
A potential corporate email address has been identified in the URL: [email protected]
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext