General
-
Target
https://download2268.mediafire.com/4hq3krmvnoggEghVxNl2WWDOEO7afguTaHiKVDQgiz3nH_sQrvb-7iE5x2ufNKVNpiMlSh8bMrHU58emQViNUBPh8apaolfaEYq-4NTL0_v6OwZQO9MWIy75YBSYNRHUNsKv7ZbcCfzFwOQGzCDK-UT_sy_ob27llFoeh9WxmmUi2Vw/kgcxp1j8u4in8ah/Insomnia.zip
-
Sample
241230-xz5ttaxldw
Malware Config
Extracted
lumma
https://abruptyopsn.shop/api
https://wholersorie.shop/api
https://framekgirus.shop/api
https://tirepublicerj.shop/api
https://noisycuttej.shop/api
https://rabidcowse.shop/api
https://cloudewahsj.shop/api
Targets
-
-
Target
https://download2268.mediafire.com/4hq3krmvnoggEghVxNl2WWDOEO7afguTaHiKVDQgiz3nH_sQrvb-7iE5x2ufNKVNpiMlSh8bMrHU58emQViNUBPh8apaolfaEYq-4NTL0_v6OwZQO9MWIy75YBSYNRHUNsKv7ZbcCfzFwOQGzCDK-UT_sy_ob27llFoeh9WxmmUi2Vw/kgcxp1j8u4in8ah/Insomnia.zip
Score10/10-
Lumma Stealer, LummaC
Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
-
Lumma family
-
Executes dropped EXE
-