MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 91e268e53754fcaaab91a3ad32ca4f67fbfc4903e75733a7174d28e1b85dd190. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	91e268e53754fcaaab91a3ad32ca4f67fbfc4903e75733a7174d28e1b85dd190
SHA3-384 hash:	2f19b50adb74bc4be9d7c82a1eccab8f56ce65c192fe212e22e1244f4da2e3f08c872bb7952f3850ae710ae4549d295a
SHA1 hash:	62e74dfbefab8130604005d07c0b711b3659259a
MD5 hash:	4b5450d05fe036f720cc7384f400b0fb
humanhash:	snake-two-jersey-earth
File name:	setup-win-x86-x64.exe.zip
Download:	download sample
Signature	LummaStealer Alert Create hunting rule
File size:	28'274'486 bytes
First seen:	2024-04-23 19:07:03 UTC
Last seen:	Never
File type:	zip
MIME type:	application/zip
ssdeep	786432:g9u6w6aCOcpDtAcwkDFPfHpJrrl4nA4YuiJbIwBNNnTTgnSugbMu1:gA6abQpAVkDRH0IdBHNntMw
TLSH	T1DB5733CC68D6308E670E9BD81F967BEEFBC5445E54C1F383568260ED6EC638087E9468
TrID	80.0% (.ZIP) ZIP compressed archive (4000/1) 20.0% (.PG/BIN) PrintFox/Pagefox bitmap (640x800) (1000/1)
Reporter	g0njxa
Tags:	lumma LummaStealer zip

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

247

Origin country :

ES

File Archive Information

This file archive contains 1 file(s), sorted by their relevance:

Relevant files 1

File name:	setup-win-x86-x64.exe
File size:	76'974'080 bytes
SHA256 hash:	3669c3c9c47a5e5c59f508976a2732aa1feabfa7c90d1912032e3426c30edde5
MD5 hash:	1a3657ef519e3d20930f400dd781dbb2
MIME type:	application/x-dosexec
Signature	LummaStealer

Vendor Threat Intelligence

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/91e268e53754fcaaab91a3ad32ca4f67fbfc4903e75733a7174d28e1b85dd190

Nucleon Malprob Susipicious

Score:

38%

Verdict:

Susipicious

File Type:

ARCHIVE

Link:

https://malprob.io/report/91e268e53754fcaaab91a3ad32ca4f67fbfc4903e75733a7174d28e1b85dd190

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud Win32.Trojan.Generic

Threat name:

Win32.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2024-04-23 19:08:09 UTC

File Type:

Binary (Archive)

Extracted files:

5

AV detection:

8 of 38 (21.05%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=shrgrzjxkt6kvk4ruowtfsspm757ysid45lthjyxjuuodoc52gia._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.