Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
17/07/2026, 04:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Lumen.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
Lumen.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target Lumen.exe
- Size 14.5MB
- Sample260717-eztsfaay7m
- SHA256 706e800661c2be0d87cab256a3d2bb49491b6eecf471ede8d4137d2e4daf9675
- MD5 fd644eae759642860a1d41ac9dc88f58
- SHA1 d6e2069aa4505cef1037295fc1deab2ab289195d
- SHA512 8cf534cef7cc1684bd6d6fbfb63ada66e5fb24603e8964ccdb2abead18d586240fec3aaee1f70280e3d071fd62c31f9dc2b312c3f9aaad6d858d168c05b0d694
- SSDEEP 196608:DNVGg8dFotv1nHpWa8q6ZoPmEeCDCsfF5U5FohzkLIQP6/:BD8dFktJWa8q6ZoPmrCDoaz3
- TLSH T1F6E6CF9864FD00FCE82AD178C7561613F6B238180770A7EB5A9489B52F37AE12E7F741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtCreateThreadExHideFromDebugger 2 IoCs
pid Process 5696 Lumen.exe 5696 Lumen.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe 5696 Lumen.exe