General
Static task
static1
URLScan task
urlscan1
Malware Config
Extracted
Family
-
lumma
C2
-
https://citydisco.bet/gdJIS
-
https://featureccus.shop/bdMAn
-
https://mrodularmall.top/aNzS
-
https://jowinjoinery.icu/bdWUa
-
https://legenassedk.top/bdpWO
-
https://htardwarehu.icu/Sbdsa
-
https://cjlaspcorne.icu/DbIps
-
https://bugildbett.top/bAuz
-
https://latchclan.shop/Wjquw
Attributes
-
build_id
433fde3e04d5351ba9a51c7236294b7c7db6c2e9e70f1f
Targets
-
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of SetThreadContext