lumma | eab84cfd06ae012bc3019e1a03f634ab85ffde828665b3fea508510680a10a43 | Triage™

Login
Reports

Overview

overview

Static

static

3

Setup.zip

windows10-2004-x64

1

Setup.zip

windows11-ltsc_2024-x64

1

.github/FUNDING.yml

windows10-2004-x64

3

.github/FUNDING.yml

windows11-ltsc_2024-x64

3

.github/functions.yml

windows10-2004-x64

3

.github/functions.yml

windows11-ltsc_2024-x64

3

.github/wo...in.yml

windows10-2004-x64

3

.github/wo...in.yml

windows11-ltsc_2024-x64

3

LICENSE

windows10-2004-x64

3

LICENSE

windows11-ltsc_2024-x64

3

README.md

windows10-2004-x64

3

README.md

windows11-ltsc_2024-x64

3

Setup.exe

windows10-2004-x64

Setup.exe

windows11-ltsc_2024-x64

password 2025.txt

windows10-2004-x64

1

password 2025.txt

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
Setup.zip
Size 645KB
Sample260827-v2c6gacj71
SHA256 eab84cfd06ae012bc3019e1a03f634ab85ffde828665b3fea508510680a10a43
MD5 8aa04d91a91178c0ca9a7b904ef18f62
SHA1 82bed185c577dccc704cafa28755b3c4dcb0754d
SHA512 e04b7e6aad2c34a053887e2bb539a34a290a17418ed781cc6011d392cb392e16941e5493476e2f17ce1fbb88281dfdf0f95560fbf18b59d1346ff9fcbc0a6cb9
SSDEEP 12288:Xo1wyX6s4px5WrydXgZwg3nFXxCmqPJQVoGEJ5ygdTtd:MwyKR75wydQZwgXl0fPNFSgdTtd
TLSH
T1F2E45D67321EE5E89305C65C9CF6A77707C3608A8AD1453578333B88FB1A6FEA64431E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

lumma discovery execution stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Setup.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Setup.zip

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

.github/FUNDING.yml

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

.github/FUNDING.yml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

.github/functions.yml

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

.github/functions.yml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

.github/workflows/main.yml

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

.github/workflows/main.yml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

LICENSE

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

LICENSE

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

README.md

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

README.md

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

Setup.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

discovery lumma stealer

Behavioral task

behavioral14

Sample

Setup.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

discovery lumma stealer

Behavioral task

behavioral15

Sample

password 2025.txt

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

password 2025.txt

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Malware Config

Extracted

Family

lumma

C2

https://cursilibim.ru/zajd
https://mastwin.in/qsaz
https://tiltyufaz.ru/tlxa
https://runmgov.ru/tixd
https://semipervaz.ru/xued
https://capitalior.ru/akts
https://retrofik.ru/jgur
https://shagkeg.ru/xkzd
https://copulardi.ru/xhza

Attributes

build_id
0394beb0a81f83c76c2876b5341aac1791fc997a9c34c2b4cf

Targets

- Target
  Setup.zip
- Size 645KB
- SHA256 eab84cfd06ae012bc3019e1a03f634ab85ffde828665b3fea508510680a10a43
- MD5 8aa04d91a91178c0ca9a7b904ef18f62
- SHA1 82bed185c577dccc704cafa28755b3c4dcb0754d
- SHA512 e04b7e6aad2c34a053887e2bb539a34a290a17418ed781cc6011d392cb392e16941e5493476e2f17ce1fbb88281dfdf0f95560fbf18b59d1346ff9fcbc0a6cb9
- SSDEEP 12288:Xo1wyX6s4px5WrydXgZwg3nFXxCmqPJQVoGEJ5ygdTtd:MwyKR75wydQZwgXl0fPNFSgdTtd
- TLSH
  T1F2E45D67321EE5E89305C65C9CF6A77707C3608A8AD1453578333B88FB1A6FEA64431E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  .github/FUNDING.yml
- Size 14B
- SHA256 a72951e950b845797dc024082c07a2bda667a1920c60e7cf9d63c15502bdb077
- MD5 89d1697a19f57a2ef68e716fc8b3eb46
- SHA1 dbad5da2ac7611a359e7df9c3de092d670b1066e
- SHA512 b74ed84f849231037499ccb878aea1aa43a98e0bb6af19d6f4a9811a4df6f840aa4fd48fa9f47b97de576ece5dedad50113e88dcce879286f5728a4cb9b82f4d
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral3 behavioral4
- Target
  .github/functions.yml
- Size 19.9MB
- SHA256 3735d777679b2b6bab6177f7736c1d21e2905d73d0cd39ee910d560ff04b892f
- MD5 4f4f281720fc532bc2296ef2bf04d99f
- SHA1 65111eb01a976eb57d116407d549111e5057ea74
- SHA512 8037c7da5ce67264e2204db04ed299976b85d977900f97c8ce8f6a2c9b30e62353a6cda57ca41765f76a8caafd981c7f93ec54bd3196b4d7281a21940ee0aca5
- SSDEEP 768:yCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCS:H
- TLSH
  T1CA27DF7129531182ADB802869A7E79C45AE8535C2B717AAB40C64C8C16F6DB0AFCFC13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  .github/workflows/main.yml
- Size 1KB
- SHA256 ecfae89aac6d8991ea4664f7f4ab2ff4fd0a7de5c43cd1b7903cc0c5f962b212
- MD5 77ad2a4f9590480d8bccb976a3285ecd
- SHA1 a0d7a77feb9d570df41465408cf2b280db1db646
- SHA512 69d51c2ec1638bf39f525bbc31cd3415c4850e65fc561c65515722fbcb7b39d922e21348c1f51f72ba3188a96276059a185f65f801515f2536dfbec93e6e8c6a
- TLSH
  T1312197414C62C431017C59AEDAEE8B25F02B820B9D091DA9BDEF60188F3A34746BD70C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  LICENSE
- Size 1KB
- SHA256 1732a46a0d5fab950aa972aa667eeb3736b48a6d05c8017d1af88c503b24460e
- MD5 5368e99077410f47f6a77184b91ae31f
- SHA1 b21644fdba48619a1fba1778141709aed6d67fbd
- SHA512 03a9d65a3c2564b9a7beb5dea1a7026f98c0dc1125163f64ac5f8a8bccf6e569bc0c5759cc20bab6dccdd7a1f4836f7d4c8864f23f8364b7b7e650afbd970599
- TLSH
  T17F21861E765007662997137059A6ACD4B23BB15F7E5B2A84346DF3451F3A47CC2FF840
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  README.md
- Size 3KB
- SHA256 c160c0cf143e8fa6819d08f07f5977de09b0adf80106bd07ca501f8077332042
- MD5 0cfa92aa81e5faddcc669ddd3ba0926f
- SHA1 d43dba353f299af3d467e3f64c23ccdae5a75d11
- SHA512 a626d13e580b0903231bdeafbfa4aed0d619220eeaf30fbf617c9892f9b006b1c6f9afeba205520a4cd99a30298c25ec7411d93eeb4be78caf7273b4ea327b20
- TLSH
  T1FF618357E306623712C6036B615F3AF6FF365524232AA0A994AD500C56D2B30A3FB5D6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  Setup.exe
- Size 742KB
- SHA256 89eed9f072eb2c4a094fc5917f8f49d31138515ed964e6c9e33075c508f15459
- MD5 6d8448b6d6c0236f15659c75802aff7f
- SHA1 4636a6d47d8da22fafe357fc45cfa01549ff8511
- SHA512 2cb583aa39efe0391ca38df94f6525d1d80e74ee5ac8af1093f1aef25b9614e78f5efbc5ebb6edee9a57dcd7f80e3325d7490c36d3836d0e1dbc116640da66c7
- SSDEEP 12288:DdWIzvKyCzmhszWR/LVM3IeWVjJHqBqf1khD1RzfT5Vy:UeCWR/S3IbVFHUGSn1fT50
- TLSH
  T1CCF4D001A5D6E07BF24E44B12C25E76528AFA9728B318EE7B3D4FEB916107D0077172E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery lumma stealer
- Family: Lumma Stealer, LummaC
  Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
  stealer lumma
behavioral13 behavioral14
- Target
  password 2025.txt
- Size 15B
- SHA256 7ddb5755f37652c3e2a066898bbfcff34e7c9ced8635a6d0fbc50562c42af9f1
- MD5 6e4f6b3e30a267f8382b5cd6fdfa9579
- SHA1 c6275b34892b3fcd8edadcac06c925ea557ab3d1
- SHA512 41a95ffc0137c0ffa0f2d7a39f5fe38275f75d2f8ce8929f1fbe70610fc3bf83e942d80b3827b89523221589cd74affd1f81ccd66dcef9652014ae34fd6d6123
- MD5 SHA1 SHA512
Score

1^/10
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

discoverylummastealer

behavioral14

discoverylummastealer

behavioral15

behavioral16

© 2018-2026

Terms | Privacy