General
URLScan task
urlscan1
Malware Config
Extracted
Family
lumma
C2
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
https://swingybeattyz.sbs/api
Extracted
Family
lumma
C2
https://swingybeattyz.sbs/api
https://abruptyopsn.shop/api
https://wholersorie.shop/api
https://framekgirus.shop/api
https://tirepublicerj.shop/api
https://noisycuttej.shop/api
https://rabidcowse.shop/api
https://cloudewahsj.shop/api
Targets
-
-
Target
https://www.mediafire.com/file/c9uuf8970lafznc/#Pa$$CŌ𝔻e--8166__OpeN-Se-tUp@!#.zip/file
-
Lumma family
-
A potential corporate email address has been identified in the URL: #Pa$$CŌ𝔻e--8166__OpeN-Se-tUp@!#
-
Executes dropped EXE
-