General
- Target 2026-04-03_67dc9c465f513fe865158a0379f9b924_amadey_elex_glassworm_icedid_luca-stealer_lynx_njrat
- Size 3.8MB
- Sample260403-d3tfeacw81
- SHA256 7736275ffda6e0d3fc4196321a56d16ac613efdf39d6a449a8a45095ab781a35
- MD5 67dc9c465f513fe865158a0379f9b924
- SHA1 0fe126a3a8a6b3ad565c62c45f50c70238ed63a1
- SHA512 ec0441b70a179dbab4c65b31195ded6a4bd05c0aff65918030b1684c988941fd8836c9c1bfed4f2f19cf4db803403bf8e241c6aac31fe6b121e0f08e3e2e9ef5
- SSDEEP 49152:iwWfOsr8oivpGh6TPaVmgbQIzZMPXpB91rHpn/qKmNAOaG6IOY/B+qtCy6qomSbN:iwWfO8GvpVNnLrHp/qKm2/Sb/gqAZj+o
- TLSH T16B06AC43EBC24AE9F38D05365B544140D72EEA619A4F1362346C229DCFA73878F65E3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-03_67dc9c465f513fe865158a0379f9b924_amadey_elex_glassworm_icedid_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
lumma
C2
-
https://drawwyobstacw.sbs/api
-
https://condifendteu.sbs/api
-
https://ehticsprocw.sbs/api
-
https://vennurviot.sbs/api
-
https://resinedyw.sbs/api
-
https://enlargkiw.sbs/api
-
https://allocatinow.sbs/api
-
https://mathcucom.sbs/api
-
https://widdensmoywi.sbs/api
Targets
-
- Target 2026-04-03_67dc9c465f513fe865158a0379f9b924_amadey_elex_glassworm_icedid_luca-stealer_lynx_njrat
- Size 3.8MB
- SHA256 7736275ffda6e0d3fc4196321a56d16ac613efdf39d6a449a8a45095ab781a35
- MD5 67dc9c465f513fe865158a0379f9b924
- SHA1 0fe126a3a8a6b3ad565c62c45f50c70238ed63a1
- SHA512 ec0441b70a179dbab4c65b31195ded6a4bd05c0aff65918030b1684c988941fd8836c9c1bfed4f2f19cf4db803403bf8e241c6aac31fe6b121e0f08e3e2e9ef5
- SSDEEP 49152:iwWfOsr8oivpGh6TPaVmgbQIzZMPXpB91rHpn/qKmNAOaG6IOY/B+qtCy6qomSbN:iwWfO8GvpVNnLrHp/qKm2/Sb/gqAZj+o
- TLSH T16B06AC43EBC24AE9F38D05365B544140D72EEA619A4F1362346C229DCFA73878F65E3E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Lumma family
-
Suspicious use of SetThreadContext