General

  • Target
    2026-08-21_78050dc9a688e3e9c78521b29c07d4e3_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
  • Size 102.4MB
  • Sample260822-phyeeaywdv
  • SHA256 ce9345ac5cd5f07bb2a243fb5076014af64a773d90770d72ef5b2952bba7e442
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • lumma

C2
  • https://crib-endanger.sbs/api

  • https://faintbl0w.sbs/api

  • https://300snails.sbs/api

  • https://bored-light.sbs/api

  • https://3xc1aimbl0w.sbs/api

  • https://pull-trucker.sbs/api

  • https://fleez-inc.sbs/api

  • https://thicktoys.sbs/api

  • https://milk-of-horned.cyou/api

Targets

    • Target
      2026-08-21_78050dc9a688e3e9c78521b29c07d4e3_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
    • Size 102.4MB
    • SHA256 ce9345ac5cd5f07bb2a243fb5076014af64a773d90770d72ef5b2952bba7e442
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

MITRE ATT&CK Enterprise v16

Tasks