🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b670074aea442993154d48682a50491eaec45489d23167368934b60ae6c19cf8. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


LummaStealer


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b670074aea442993154d48682a50491eaec45489d23167368934b60ae6c19cf8
SHA3-384 hash: 6afb9a1dea8b1845af8fce91ccd3619eb091ba5c10b854ce1204d7d54293f25f4769e4517f4dba09023928c1ae2e9e1a
SHA1 hash: 879a673f6c08c2f1590c3fa78b78813d9742c47e
MD5 hash: 1f4659b969ce4af415f22a23d858982c
humanhash: november-golf-angel-fanta
File name:File_Setup-4455_KéyC0de.rar_b670074aea442993154d48682a50491eaec45489d23167368934b60ae6c19cf8
Download: download sample
Signature LummaStealer
Create hunting rule
File size:2'805'902 bytes
First seen:2024-01-29 17:20:37 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 49152:R21Nbr1hXQ8XRXIQwhpwbggUTsnt3odO49/ORDbHF2BsXh:6NNhBXIQuOggks1GORRPgU
TLSH T195D533DF6DE230049FBC487A359F650B54271EDA80A32D819C2EDB5C17C762918EB7CA
TrID 61.5% (.RAR) RAR compressed archive (v5.0) (8000/1)
38.4% (.RAR) RAR compressed archive (gen) (5000/1)
Reporter Cryptolaemus1
Tags:KjGtqi lumma LummaStealer rar ViaCrackSite WHISKEY


Avatar
Cryptolaemus1
C2s: "brickabsorptiondullyi.site",
"retainfactorypunishjkw.site",
"communicationinchoicer.site",
"carvewomanflavourwop.site",
"vesselspeedcrosswakew.site",
"cooperatecliqueobstac.site",
"racerecessionrestrai.site",
"braidfadefriendklypk.site",
"acquisitionfinancej.shop"

Intelligence

File Origin
# of uploads :
1
# of downloads :
141
Origin country :
US US
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/b670074aea442993154d48682a50491eaec45489d23167368934b60ae6c19cf8/
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=wzyaosxkiquzgfknjbucuucjd2xmivej2iywonujgs3avzwbtt4a._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Lumma
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/b670074aea442993154d48682a50491eaec45489d23167368934b60ae6c19cf8

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

LummaStealer

rar b670074aea442993154d48682a50491eaec45489d23167368934b60ae6c19cf8

(this sample)

  
Link
https://tria.ge/240129-vlvqksefc4
  
Delivery method
Distributed via web download

Comments