MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 dc91b1ac776b4780ee4235b286cf9f695d308ed8de8a7c8b8d983cce0630c926. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	dc91b1ac776b4780ee4235b286cf9f695d308ed8de8a7c8b8d983cce0630c926
SHA3-384 hash:	18d03193ec219c0420176a03011af7de13fdfe11b789db6b98a0ba66ae22badb28603867aca72cb8ddb144fdfd6d540b
SHA1 hash:	d019ce318b55578e22161a5001e6e5785915a027
MD5 hash:	db9508ac835fce4dcfcc49a9e24817d6
humanhash:	minnesota-mountain-neptune-emma
File name:	Mega_FullApp_Setup_2023_PassWord.zip
Download:	download sample
Signature	LummaStealer Alert Create hunting rule
File size:	3'802'974 bytes
First seen:	2024-01-17 18:34:09 UTC
Last seen:	Never
File type:	zip
MIME type:	application/zip
ssdeep	49152:fh/gqS8YudyEmIF20qMRU9z5czcek+G96O/iN9+/i89Fx1mxMoR6GLye9UtA5:fh/+Q/F20hC+BYiN9V8/x1mx5RjjS8
TLSH	T164063368F491298B59DFD235FEB13FF940E4163AFED45860D19A008C8B05F6DBAE1B48
TrID	80.0% (.ZIP) ZIP compressed archive (4000/1) 20.0% (.PG/BIN) PrintFox/Pagefox bitmap (640x800) (1000/1)
Reporter	lazyactivist192
Tags:	2023 KjGtqi lumma LummaStealer ViaCrackSite zip

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

194

Origin country :

US

File Archive Information

This file archive contains 2 file(s), sorted by their relevance:

Relevant files 2

File name:	PassWord.txt
File size:	1'997'564 bytes
SHA256 hash:	0457a102c62bac60f0920618abe3b61cfb2026647e019c0ba0747ff52d0ad92f
MD5 hash:	4ad5579927e370d5ba98a19731940503
MIME type:	text/plain
Signature	LummaStealer

File name:	Mega_FullApp_Setup_2023_PassWord.rar
File size:	3'796'718 bytes
SHA256 hash:	f6a5cd36aef2847a2fe7eb607739a32f00f6034d1a950c764bb72f25f3118c35
MD5 hash:	db60c47023228384630a3e9626752139
MIME type:	application/x-rar
Signature	LummaStealer

Vendor Threat Intelligence

FileScan.io

Gathering data

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/dc91b1ac776b4780ee4235b286cf9f695d308ed8de8a7c8b8d983cce0630c926

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

Archive

Link:

https://malprob.io/report/dc91b1ac776b4780ee4235b286cf9f695d308ed8de8a7c8b8d983cce0630c926

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/dc91b1ac776b4780ee4235b286cf9f695d308ed8de8a7c8b8d983cce0630c926/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=3si3dldxnndyb3scgwzint47nfotbdwy32fhzc4nta6m4brqzeta._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

n/a

Link:

https://tria.ge/reports/240117-xrhdjsddg9/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Lumma

Threat name:

Lumma

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/dc91b1ac776b4780ee4235b286cf9f695d308ed8de8a7c8b8d983cce0630c926

Comments

---

Login required

You need to login to in order to write a comment. Login with your abuse.ch account.

James Quinn commented on 2024-01-17 18:39:01 UTC

https://tria.ge/240117-w2c15schc2