General

  • Target

    https://uprootquincju.shop/api

  • Sample

    250302-n1yx8atwcx

Malware Config

Extracted

Family

lumma

C2

https://uprootquincju.shop/api

Targets

    • Target

      https://uprootquincju.shop/api

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Mark of the Web detected: This indicates that the page was originally saved or cloned.

MITRE ATT&CK Enterprise v15

Tasks