← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
HijackLoader evolution: abusing genuine signing certificates
WHITE CyberHunter_NL 2024-10-15 Modified: 2024-10-15
155
IOCs
HIGH VOLUME
A report by HarfangLab EDR and MITRE ATT&CK on the threat posed by the Lumma Stealer malware, published on 11 October, 2024, outlines the tactics used to deploy the malware.
hijackloaderoctobersamplesharfanglab edrsha256lumma stealerdll sideloadinginfection chainfake captchazip archiveinstallerpathhiderloadergatepowershelllummasamecoin
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Lumma SameCoin
Indicators of Compromise (1 / 155 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
URL https://denwp.com/anatomy-of-a-lumma-stealer/ — 2024-10-15
References (1)
↗ https://harfanglab.io/insidethelab/hijackloader-abusing-genuine-certificates/