General

  • Target
    2026-08-12_0802e2991f4a6745b094f862cbed5c46_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat
  • Size 417KB
  • Sample260812-2r645awfjf
  • SHA256 10bccf1c48a027a9bea2a633b7714b7ff422481af637e841abf0a3bc10236a37
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • lumma

C2
  • https://sordid-snaked.cyou/api

  • https://awake-weaves.cyou/api

  • https://wrathful-jammy.cyou/api

  • https://debonairnukk.xyz/api

  • https://diffuculttan.xyz/api

  • https://effecterectz.xyz/api

  • https://deafeninggeh.biz/api

  • https://immureprech.biz/api

  • https://tacitglibbr.biz/api

Targets

    • Target
      2026-08-12_0802e2991f4a6745b094f862cbed5c46_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat
    • Size 417KB
    • SHA256 10bccf1c48a027a9bea2a633b7714b7ff422481af637e841abf0a3bc10236a37
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks