General
-
Target
https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbWxuNEdSR0JWRTBxY3JuMDdEUXBWNE9KM0VpQXxBQ3Jtc0tuVDdZMF9VR2F4SUZmZE13X0JoOGh6d1UtSVRhb040XzNudnd1cVhsV2M2V0R3d0ZoNUdTOThSbUlOX1RsX2tILWlVYmNfNy05ZEVBdVFTbmRucmkyVV80X2tPWmowbEk4SnBHd2pHdnIxbXVEbHRYUQ&q=https%3A%2F%2Fsites.google.com%2Fview%2Fexlauncher69%2Fdownload&v=3nYdJ7wgkpY
-
Sample
250118-s6sqlsyjek
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbWxuNEdSR0JWRTBxY3JuMDdEUXBWNE9KM0VpQXxBQ3Jtc0tuVDdZMF9VR2F4SUZmZE13X0JoOGh6d1UtSVRhb040XzNudnd1cVhsV2M2V0R3d0ZoNUdTOThSbUlOX1RsX2tILWlVYmNfNy05ZEVBdVFTbmRucmkyVV80X2tPWmowbEk4SnBHd2pHdnIxbXVEbHRYUQ&q=https%3A%2F%2Fsites.google.com%2Fview%2Fexlauncher69%2Fdownload&v=3nYdJ7wgkpY
Resource
win10v2004-20241007-en
Malware Config
Extracted
lumma
https://inflameopooi.shop/api
Targets
-
-
Target
https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbWxuNEdSR0JWRTBxY3JuMDdEUXBWNE9KM0VpQXxBQ3Jtc0tuVDdZMF9VR2F4SUZmZE13X0JoOGh6d1UtSVRhb040XzNudnd1cVhsV2M2V0R3d0ZoNUdTOThSbUlOX1RsX2tILWlVYmNfNy05ZEVBdVFTbmRucmkyVV80X2tPWmowbEk4SnBHd2pHdnIxbXVEbHRYUQ&q=https%3A%2F%2Fsites.google.com%2Fview%2Fexlauncher69%2Fdownload&v=3nYdJ7wgkpY
-
Lumma family
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-