General

  • Target
    2026-08-19_59e8a3a63fa6f4d6f3b1caeb737448bf_amadey_cobalt-strike_elex_luca-stealer_lynx_mespinoza_njrat_smoke-loader
  • Size 548KB
  • Sample260820-b6vfrsxgnf
  • SHA256 8963564297733796bcdd57177a1267b00475ebb915fc9dd6a1a802beaab8c915
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Extracted

Family
  • lumma

C2
  • https://hummskitnj.buzz/api

  • https://cashfuzysao.buzz/api

  • https://appliacnesot.buzz/api

  • https://screwamusresz.buzz/api

  • https://inherineau.buzz/api

  • https://scentniej.buzz/api

  • https://rebuildeso.buzz/api

  • https://prisonyfork.buzz/api

  • https://mindhandru.buzz/api

Targets

    • Target
      2026-08-19_59e8a3a63fa6f4d6f3b1caeb737448bf_amadey_cobalt-strike_elex_luca-stealer_lynx_mespinoza_njrat_smoke-loader
    • Size 548KB
    • SHA256 8963564297733796bcdd57177a1267b00475ebb915fc9dd6a1a802beaab8c915
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Family: Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks