General

  • Target
    2026-11-10_f69e303a166598a0bc3432cb9b8c2eee_amadey_cobalt-strike_elex_hellokitty
  • Size 482KB
  • Sample261111-spms2ayzfz
  • SHA256 735b7823c8f730d7c35060f6ac9a393d7e8a04294abf4eb0f0aa675f597cac2e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Extracted

Family
  • lumma

C2
  • https://roomabolishsnifftwk.shop/api

  • https://civilianurinedtsraov.shop/api

  • https://stalfbaclcalorieeis.shop/api

  • https://employhabragaomlsp.shop/api

  • https://femininiespywageg.shop/api

  • https://averageaattractiionsl.shop/api

  • https://buttockdecarderwiso.shop/api

  • https://museumtespaceorsp.shop/api

  • https://sideindexfollowragelrew.pw/api

Targets

    • Target
      2026-11-10_f69e303a166598a0bc3432cb9b8c2eee_amadey_cobalt-strike_elex_hellokitty
    • Size 482KB
    • SHA256 735b7823c8f730d7c35060f6ac9a393d7e8a04294abf4eb0f0aa675f597cac2e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Family: Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks