General
- Target 2026-08-19_59e8a3a63fa6f4d6f3b1caeb737448bf_amadey_cobalt-strike_elex_luca-stealer_lynx_mespinoza_njrat_smoke-loader
- Size 548KB
- Sample260820-b6vfrsxgnf
- SHA256 8963564297733796bcdd57177a1267b00475ebb915fc9dd6a1a802beaab8c915
- MD5 59e8a3a63fa6f4d6f3b1caeb737448bf
- SHA1 635bc945efa235fafd3d39cad94cd086422a5639
- SHA512 4b62d69fb6074ab4428b792f1ed29c9a9c98e4335274c2142a32ad558a5c720042efc57226c35e9e45b9528c999c039348775b90a25bc72b38f47ff179dd9d17
- SSDEEP 12288:Biiy2LA/I0xusciua5z2NEpYBRupKm7BfHgq155ppbdGax1Ou75vunMGZaobaOWo:Biiy2LA/I0xusciua5CNEpYBRupKm7BS
- TLSH T1FCC4D042769184B3D5631A775978D7390A3FB8200F7166CBA3984FBDCEB02D18E31A6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_59e8a3a63fa6f4d6f3b1caeb737448bf_amadey_cobalt-strike_elex_luca-stealer_lynx_mespinoza_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
lumma
C2
-
https://hummskitnj.buzz/api
-
https://cashfuzysao.buzz/api
-
https://appliacnesot.buzz/api
-
https://screwamusresz.buzz/api
-
https://inherineau.buzz/api
-
https://scentniej.buzz/api
-
https://rebuildeso.buzz/api
-
https://prisonyfork.buzz/api
-
https://mindhandru.buzz/api
Targets
-
- Target 2026-08-19_59e8a3a63fa6f4d6f3b1caeb737448bf_amadey_cobalt-strike_elex_luca-stealer_lynx_mespinoza_njrat_smoke-loader
- Size 548KB
- SHA256 8963564297733796bcdd57177a1267b00475ebb915fc9dd6a1a802beaab8c915
- MD5 59e8a3a63fa6f4d6f3b1caeb737448bf
- SHA1 635bc945efa235fafd3d39cad94cd086422a5639
- SHA512 4b62d69fb6074ab4428b792f1ed29c9a9c98e4335274c2142a32ad558a5c720042efc57226c35e9e45b9528c999c039348775b90a25bc72b38f47ff179dd9d17
- SSDEEP 12288:Biiy2LA/I0xusciua5z2NEpYBRupKm7BfHgq155ppbdGax1Ou75vunMGZaobaOWo:Biiy2LA/I0xusciua5CNEpYBRupKm7BS
- TLSH T1FCC4D042769184B3D5631A775978D7390A3FB8200F7166CBA3984FBDCEB02D18E31A6D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Suspicious use of SetThreadContext