Analysis
- user interaction
yes - max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
16/07/2026, 18:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Lumen.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Lumen.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target Lumen.exe
- Size 14.6MB
- Sample260716-w5pjcaft7x
- SHA256 4d885f177023db26469b93bd899d04aff88561cc74ffa54fab1e3e6e999f7ada
- MD5 e1564a4d8623298c1ea679b7cb049f2d
- SHA1 f4c52f5570bf95fddf92e5cd9169e0e78fa3c4cb
- SHA512 7c298c8c44021d7fabd899da0894dac96141c47c16af586e06187383098be43f74f47ac7db98c9213d2b7588ce36ff10398e8263ec899d2ff077db5d1878935c
- SSDEEP 196608:4oLKswLQYQdsImBYmoYlB9OBQreF3fF5U5PR5jegf8Iw:1vwLQYcs7BYmoYlB9OeregpMvI
- TLSH T1B0F6BFA874FC00F8E826C1B4C7865717FB723825077066DB5AD489A52F33AE52E7E742
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtCreateThreadExHideFromDebugger 2 IoCs
pid Process 5080 Lumen.exe 5080 Lumen.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe 5080 Lumen.exe