Resubmissions

10/04/2025, 18:05

250410-wn87esyyft 10

10/04/2025, 18:01

250410-wl6nhsymy2 8

General

  • Target

    https://www.mediafire.com/folder/uml3a9raehtf2/des

  • Sample

    250410-wn87esyyft

Malware Config

Extracted

Family

lumma

C2

https://clarmodq.top/qoxo

https://soursopsf.run/gsoiao

https://changeaie.top/geps

https://easyupgw.live/eosz

https://liftally.top/xasj

https://upmodini.digital/gokk

https://salaccgfa.top/gsooz

https://ezestmodp.top/zeda

https://xcelmodo.run/nahd

Targets

    • Target

      https://www.mediafire.com/folder/uml3a9raehtf2/des

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Loads dropped DLL

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks