General

  • Target
    2026-04-03_67dc9c465f513fe865158a0379f9b924_amadey_elex_glassworm_icedid_luca-stealer_lynx_njrat
  • Size 3.8MB
  • Sample260403-d3tfeacw81
  • SHA256 7736275ffda6e0d3fc4196321a56d16ac613efdf39d6a449a8a45095ab781a35
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Extracted

Family
  • lumma

C2
  • https://drawwyobstacw.sbs/api

  • https://condifendteu.sbs/api

  • https://ehticsprocw.sbs/api

  • https://vennurviot.sbs/api

  • https://resinedyw.sbs/api

  • https://enlargkiw.sbs/api

  • https://allocatinow.sbs/api

  • https://mathcucom.sbs/api

  • https://widdensmoywi.sbs/api

Targets

    • Target
      2026-04-03_67dc9c465f513fe865158a0379f9b924_amadey_elex_glassworm_icedid_luca-stealer_lynx_njrat
    • Size 3.8MB
    • SHA256 7736275ffda6e0d3fc4196321a56d16ac613efdf39d6a449a8a45095ab781a35
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks