General
-
Target
https://download948.mediafire.com/iy187imy2ljg1tzMUEnATVv2SKSwmnhBAn_PDNpwxVbIzzNoQ4B4Inrgo7-asZN8DHXhWw_xeJg85EDMS22l_WP3UEJP_0Vol5QKzJODgeNT5_VIzLiGruMd7YOg40Haf1Q1I8anG1xVyjFcIYsgt-Q2MphrdV3FCr7oataYRtR_dA/lcnb76vkugha3eh/BoostrappersRelese.zip
-
Sample
250106-hvfxkasjhq
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
Targets
-
-
Target
https://download948.mediafire.com/iy187imy2ljg1tzMUEnATVv2SKSwmnhBAn_PDNpwxVbIzzNoQ4B4Inrgo7-asZN8DHXhWw_xeJg85EDMS22l_WP3UEJP_0Vol5QKzJODgeNT5_VIzLiGruMd7YOg40Haf1Q1I8anG1xVyjFcIYsgt-Q2MphrdV3FCr7oataYRtR_dA/lcnb76vkugha3eh/BoostrappersRelese.zip
Score10/10-
Lumma Stealer, LummaC
Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
-
Lumma family
-
Executes dropped EXE
-
Enumerates processes with tasklist
-