LummaStealer Lab CyberDefenders |Writeup
Tags
country: Russia
maec-delivery-vectors: Watering Hole
attack-pattern: Data Model Cdns - T1596.004 Domains - T1583.001 Domains - T1584.001 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Mshta - T1218.005 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Process Hollowing - T1055.012 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Mshta - T1170 Powershell - T1086 Process Hollowing - T1093
Show in Graph
Common Information
Type Value
UUID c4b0a632-1b9b-48a2-b205-e40c92d0926d
Fingerprint 9c2b9995293727b9
Analysis status DONE
Considered CTI value -2
Text language
Published Nov. 12, 2024, 8:33 a.m.
Added to db Nov. 12, 2024, 9:51 a.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline LummaStealer Lab CyberDefenders |Writeup
Title LummaStealer Lab CyberDefenders |Writeup
Detected Hints/Tags/Attributes 46/3/16
Source URLs
Redirection Url
Details Source https://medium.com/@SIGMA_001/lummastealer-lab-cyberdefenders-writeup-9fbd49651d4b?source=rss------cybersecurity-5
Details Source https://medium.com/@SIGMA_001/lummastealer-lab-cyberdefenders-writeup-9fbd49651d4b?source=rss------malware-5
URL Provider
Details Provider Source level domain
Details medium.com medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 ✔ Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Details 171 ✔ Malware on Medium https://medium.com/feed/tag/malware 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 3 
clicktogo.click
Details Domain 149 
system.security
Details Domain 228 
system.io
Details Domain 1 
tera15.zip
Details Domain 1 
votteryloeq.shop
Details File 1 
%userprofile%\appdata\roaming\microsoft\windows\powershell\psreadline\consolehost_history.txt
Details File 1 
html.vbs
Details File 1208 
powershell.exe
Details File 1 
kcqxc.key
Details File 9 
compression.zip
Details File 1 
tera15.zip
Details File 1 
chkbkx.exe
Details File 9 
bitlockertogo.exe
Details md5 1 
53626368526B457A4E4F695244796C53
Details MITRE ATT&CK Techniques 59 
T1218.005
Details Url 1 
https://clicktogo.click/uploads/tra15