General

  • Target

    https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbEEwRzliMHRPOENJWEZBdnFDOThkMkEtMDZXd3xBQ3Jtc0trY2tWZ3pvR2gxVUd1TVNSemFpYlFiWFFQV1lZUTJuMFVkNWlOSHlBb2tnQXNMQnNDc1JHeHpGYjBlWG4zSW1jVGZ5NlppQk5qbkpQejlZak5iOHNmV1dEV01WLWx5bXZXUEZOdzV1SVZuUWQ0MktSQQ&q=https%3A%2F%2Fapp.mediafire.com%2Ff169cqy6jf7l3&v=tYEfOijBLcM

  • Sample

    240703-m6dc2azapd

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://citizencenturygoodwk.shop/api

https://potterryisiw.shop/api

https://foodypannyjsud.shop/api

https://contintnetksows.shop/api

https://reinforcedirectorywd.shop/api

Targets

    • Target

      https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbEEwRzliMHRPOENJWEZBdnFDOThkMkEtMDZXd3xBQ3Jtc0trY2tWZ3pvR2gxVUd1TVNSemFpYlFiWFFQV1lZUTJuMFVkNWlOSHlBb2tnQXNMQnNDc1JHeHpGYjBlWG4zSW1jVGZ5NlppQk5qbkpQejlZak5iOHNmV1dEV01WLWx5bXZXUEZOdzV1SVZuUWQ0MktSQQ&q=https%3A%2F%2Fapp.mediafire.com%2Ff169cqy6jf7l3&v=tYEfOijBLcM

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks