Overview

overview

10

Static

static

1

URLScan

urlscan

1

https://storage-prod...

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://storage-prod-do-blr1-c.transfernow.net/files/2025-01-18%2F50881acb09bfe9169b09851e682d9750%2F20250118d1daVVAq%2FSfkyIv%2FR%D0%B5le%D0%B0s%D0%B5%D0%92-x64.zip?fileName=R%D0%B5le%D0%B0s%D0%B5%D0%92-x64.zip&bucketName=tnow-prod-apac&bucketId=6713bc8a-6b2c-4105-a432-4ff791c2ab89&size=12460685&singleFile=true&storageCache=true&x-amz-server-side-encryption-customer-algorithm=AES256&x-amz-server-side-encryption-customer-key=qX8L58lkXHtloqHC2VoqtciGSfMgTJBrZYdYl%2BafW3Y%3D&token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwYXRoIjoiL2ZpbGVzLzIwMjUtMDEtMTglMkY1MDg4MWFjYjA5YmZlOTE2OWIwOTg1MWU2ODJkOTc1MCUyRjIwMjUwMTE4ZDFkYVZWQXElMkZTZmt5SXYlMkZSJUQwJUI1bGUlRDAlQjBzJUQwJUI1JUQwJTkyLXg2NC56aXAiLCJpYXQiOjE3Mzc1NjE4NzAsImV4cCI6MTczNzU2MTk5MH0.VfVxchBVaNcA5E4sYgslQ-LyozAYQsOCdeX8R4tUEE0

  • Sample

    250122-tk4restrds

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://tradersneez.click/api

https://impolitewearr.biz/api

https://toppyneedus.biz/api

https://lightdeerysua.biz/api

https://suggestyuoz.biz/api

https://hoursuhouy.biz/api

https://mixedrecipew.biz/api

https://affordtempyo.biz/api

https://pleasedcfrown.biz/api

Targets

    • Target

      https://storage-prod-do-blr1-c.transfernow.net/files/2025-01-18%2F50881acb09bfe9169b09851e682d9750%2F20250118d1daVVAq%2FSfkyIv%2FR%D0%B5le%D0%B0s%D0%B5%D0%92-x64.zip?fileName=R%D0%B5le%D0%B0s%D0%B5%D0%92-x64.zip&bucketName=tnow-prod-apac&bucketId=6713bc8a-6b2c-4105-a432-4ff791c2ab89&size=12460685&singleFile=true&storageCache=true&x-amz-server-side-encryption-customer-algorithm=AES256&x-amz-server-side-encryption-customer-key=qX8L58lkXHtloqHC2VoqtciGSfMgTJBrZYdYl%2BafW3Y%3D&token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwYXRoIjoiL2ZpbGVzLzIwMjUtMDEtMTglMkY1MDg4MWFjYjA5YmZlOTE2OWIwOTg1MWU2ODJkOTc1MCUyRjIwMjUwMTE4ZDFkYVZWQXElMkZTZmt5SXYlMkZSJUQwJUI1bGUlRDAlQjBzJUQwJUI1JUQwJTkyLXg2NC56aXAiLCJpYXQiOjE3Mzc1NjE4NzAsImV4cCI6MTczNzU2MTk5MH0.VfVxchBVaNcA5E4sYgslQ-LyozAYQsOCdeX8R4tUEE0

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Executes dropped EXE

    • Enumerates processes with tasklist

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks