Analysis
- max time kernel
150s - max time network
143s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
22/06/2026, 12:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Lumen.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Lumen.exe
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target Lumen.exe
- Size 14.5MB
- Sample260622-pcdstabz5x
- SHA256 af7dea0ab0f4f02ff7ff36ce4f99a266656446e216c9030c883c43e761fd4d94
- MD5 58a97e803195791c03e9b446b061fd29
- SHA1 ed8d297df37aa8f2cb8a1269b614cc5a6d2d3671
- SHA512 f0561851fb739a5f9799ca82318b1ccebc75627823f1aabfd69afae1a607ae6ffd1e97ab9eab67fb66ad61a661c6e0321887692fc55eaa2a29c1642cc977fc0f
- SSDEEP 196608:Fz680XbIZt4F+WCo/QFAboBEx4eTiEEfF5U5OgGmq3PwYTYT+96n:d680Xbwtc+WCo/QFgoBk4e+K1H
- TLSH T166E6C09864FC00E8D937C074C7566663FE71781807706AEB5BA489B52F33AE12E7E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtCreateThreadExHideFromDebugger 2 IoCs
pid Process 4980 Lumen.exe 4980 Lumen.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe 4980 Lumen.exe