General
- Target 2026-03-07_8a1934414a183f74eb98d1ee624b5978_amadey_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 887KB
- Sample260307-enzjjsdy61
- SHA256 5072ae603a238142cca3e3fedb774efa14c457a25ce8e1acdf83e88ed1b94e50
- MD5 8a1934414a183f74eb98d1ee624b5978
- SHA1 21a7b9e0b0e2d9eaecc204eb3bb2e156a36fed82
- SHA512 2e9d8b883ccad2cbb7c8b324ec0b53e28fbece7cf2230b5596885e2974196e8bdaeb2890d83826e882b2b5a15e5a33caa57c012f84de124f9b4ba277a4b5c811
- SSDEEP 12288:27D2B/BSBPPdVUQK6HeZ+0PRJl0cTPqvo4qMP/AWFtl7OCcg0kY:2dEQlXplvo4bP
- TLSH T123158EBA9378E455E4EFEC36D91442A6101389B25C8CC2DF2D85268979B1F8D1FFE10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-03-07_8a1934414a183f74eb98d1ee624b5978_amadey_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-03-07_8a1934414a183f74eb98d1ee624b5978_amadey_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
lumma
C2
-
https://gemcreedarticulateod.shop/api
-
https://secretionsuitcasenioise.shop/api
-
https://claimconcessionrebe.shop/api
-
https://liabilityarrangemenyit.shop/api
Targets
-
- Target 2026-03-07_8a1934414a183f74eb98d1ee624b5978_amadey_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 887KB
- SHA256 5072ae603a238142cca3e3fedb774efa14c457a25ce8e1acdf83e88ed1b94e50
- MD5 8a1934414a183f74eb98d1ee624b5978
- SHA1 21a7b9e0b0e2d9eaecc204eb3bb2e156a36fed82
- SHA512 2e9d8b883ccad2cbb7c8b324ec0b53e28fbece7cf2230b5596885e2974196e8bdaeb2890d83826e882b2b5a15e5a33caa57c012f84de124f9b4ba277a4b5c811
- SSDEEP 12288:27D2B/BSBPPdVUQK6HeZ+0PRJl0cTPqvo4qMP/AWFtl7OCcg0kY:2dEQlXplvo4bP
- TLSH T123158EBA9378E455E4EFEC36D91442A6101389B25C8CC2DF2D85268979B1F8D1FFE10B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Lumma family