General
-
Target
https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqa1dBS1RqMENnZ01IZ01BQXZrNDBUVTVYb0s0UXxBQ3Jtc0ttYkk2cVVPV3pJQzd4Z1Z6TEJuYl95TXFOUlJyLXN4UTRXLUo0Rk5ucUhTVEZnV0VyZTZKS2dYc090OFNUdU1PUDk5WGUtTkF3VUFfdmtfYXVVeXNEc2UzaXV2cmhYcWNSNENfczlPTUlkQTJRVTB4NA&q=https%3A%2F%2Fwww.mediafire.com%2Ffolder%2F1zyvrbjb384bs%2Ftesdt&v=XQ1JwElXAlY
-
Sample
241229-21ca4szkhs
Malware Config
Extracted
lumma
https://hummskitnj.buzz/api
https://cashfuzysao.buzz/api
https://appliacnesot.buzz/api
https://screwamusresz.buzz/api
https://inherineau.buzz/api
https://scentniej.buzz/api
https://rebuildeso.buzz/api
https://prisonyfork.buzz/api
https://begguinnerz.biz/api
Extracted
lumma
https://begguinnerz.biz/api
Targets
-
-
Target
https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqa1dBS1RqMENnZ01IZ01BQXZrNDBUVTVYb0s0UXxBQ3Jtc0ttYkk2cVVPV3pJQzd4Z1Z6TEJuYl95TXFOUlJyLXN4UTRXLUo0Rk5ucUhTVEZnV0VyZTZKS2dYc090OFNUdU1PUDk5WGUtTkF3VUFfdmtfYXVVeXNEc2UzaXV2cmhYcWNSNENfczlPTUlkQTJRVTB4NA&q=https%3A%2F%2Fwww.mediafire.com%2Ffolder%2F1zyvrbjb384bs%2Ftesdt&v=XQ1JwElXAlY
Score10/10-
Lumma Stealer, LummaC
Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
-
Lumma family
-
A potential corporate email address has been identified in the URL: 8D6867C25245AEFB0A490D4C@AdobeOrg
-