General
- Target 2026-08-12_0802e2991f4a6745b094f862cbed5c46_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat
- Size 417KB
- Sample260812-2r645awfjf
- SHA256 10bccf1c48a027a9bea2a633b7714b7ff422481af637e841abf0a3bc10236a37
- MD5 0802e2991f4a6745b094f862cbed5c46
- SHA1 76b37d982c9a650af6ba6f38d0fcf1465b0e23bc
- SHA512 35234afdb538829ed57abd0c787d88b13837680cf69d03050fcb227d23d6c10fff0fb3bdcd1ef2b17bc195d18f156d0b045ea5e983ec7c88b83bb1140c51f643
- SSDEEP 12288:JFNaxyx5RSPbkSasyHiaHuroeDd3bDtOfWCyK83lAR8:J3Hx5MzqsyHiaHADdLDtOPeiR8
- TLSH T1E894020275D0C4B2E066293008A0DBF2AA7DEC750F696DCB73D85A7B5F706C09535EBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_0802e2991f4a6745b094f862cbed5c46_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
lumma
C2
-
https://sordid-snaked.cyou/api
-
https://awake-weaves.cyou/api
-
https://wrathful-jammy.cyou/api
-
https://debonairnukk.xyz/api
-
https://diffuculttan.xyz/api
-
https://effecterectz.xyz/api
-
https://deafeninggeh.biz/api
-
https://immureprech.biz/api
-
https://tacitglibbr.biz/api
Targets
-
- Target 2026-08-12_0802e2991f4a6745b094f862cbed5c46_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat
- Size 417KB
- SHA256 10bccf1c48a027a9bea2a633b7714b7ff422481af637e841abf0a3bc10236a37
- MD5 0802e2991f4a6745b094f862cbed5c46
- SHA1 76b37d982c9a650af6ba6f38d0fcf1465b0e23bc
- SHA512 35234afdb538829ed57abd0c787d88b13837680cf69d03050fcb227d23d6c10fff0fb3bdcd1ef2b17bc195d18f156d0b045ea5e983ec7c88b83bb1140c51f643
- SSDEEP 12288:JFNaxyx5RSPbkSasyHiaHuroeDd3bDtOfWCyK83lAR8:J3Hx5MzqsyHiaHADdLDtOPeiR8
- TLSH T1E894020275D0C4B2E066293008A0DBF2AA7DEC750F696DCB73D85A7B5F706C09535EBA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Suspicious use of SetThreadContext