General
-
Target
https://download2296.mediafire.com/q9ke3sxvw4pgKuP5FJso5DKOMwTI5V2YVtj-rW_UWWTGMRZb1MECbEklw2jrhi1mo6-Qq6H-xFKeYOBW-4z2tDS2XvlcYm_u2889le4C3eO02z9SUQScrzgQLsA3aLBY1Kknq5szREZDAuqiWcqLN0AQLPtx4U2hN14V8CGWmqoa/ci94jd9m3ktvj4j/%5B1.1.0%5D-A%D1%80%D1%80-UNC-x64.zip
-
Sample
250106-2lmhja1mcv
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
https://paymom/api
Targets
-
-
Target
https://download2296.mediafire.com/q9ke3sxvw4pgKuP5FJso5DKOMwTI5V2YVtj-rW_UWWTGMRZb1MECbEklw2jrhi1mo6-Qq6H-xFKeYOBW-4z2tDS2XvlcYm_u2889le4C3eO02z9SUQScrzgQLsA3aLBY1Kknq5szREZDAuqiWcqLN0AQLPtx4U2hN14V8CGWmqoa/ci94jd9m3ktvj4j/%5B1.1.0%5D-A%D1%80%D1%80-UNC-x64.zip
Score10/10-
Lumma Stealer, LummaC
Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
-
Lumma family
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-