General

  • Target
    2026-07-17_3e918301b2699a1f7b14b37a6690982c_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
  • Size 965KB
  • Sample260717-j377fsfs7k
  • SHA256 1b216d9e333d3f4f4bbb3ca956600dbe3e536669b56c3feac2290cd182b0b051
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Extracted

Family
  • lumma

C2
  • https://t.me/vstalnasral555

  • https://shoresolfe.live/ysbt

  • https://narrathfpt.top/tekq

  • https://escczlv.top/bufi

  • https://caitraohvi.bet/adks

  • https://galijd.shop/anbf

  • https://ordntx.top/pxla

  • https://strejqt.bet/mbnj

  • https://citellcagt.top/gjtu

  • https://maxmtsq.bet/xzid

Attributes
  • build_id

    c7b18c1aef8c42df42db006a658468ed968ee65c85eb8068a5

Targets

    • Target
      2026-07-17_3e918301b2699a1f7b14b37a6690982c_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
    • Size 965KB
    • SHA256 1b216d9e333d3f4f4bbb3ca956600dbe3e536669b56c3feac2290cd182b0b051
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Family: Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks