7e625763d2316c0429a6f50373be4a86690ceb0ffb7626cb2c2b2633db22891c

Classification: Malicious

7e625763d2316c0429a6f50373be4a86690ceb0ffb7626cb2c2b2633db22891c is a malicious file sample. Linked to Lumma Stealer malware.

Detection summary

  • 64 antivirus detections
  • 2 IDS alerts
  • 4 processes observed
  • 2 contacted hosts
  • 9 DNS requests

MITRE ATT&CK associations

Malware families: LUMMA STEALER (S1213)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2024-10-20 17:30:05 2026-09-02 12:45:05 malicious-activity
Lumma Stealer ThreatFox Abuse.ch 2025-04-02 16:33:59 2025-04-04 17:32:34 S1213 Lumma Stealer
Generic.Malware MalwareBazaar Abuse.ch 2024-10-20 17:11:36 2024-10-20 17:11:36 malicious-activity

Tags

evasive win.lumma lummac2 stealer malicious

Sample information

Filenames
7e625763d2316c0429a6f50373be4a86690ceb0ffb7626cb2c2b2633db22891c, file
File type
PE32 executable (GUI) Intel 80386, for MS Windows
Size
2929152 bytes
MD5
704542b9a18bd762deff27ffa0434793
SHA-1
dcf667206b2f11547413c2565a832b1fa98be549
SHA-256
7e625763d2316c0429a6f50373be4a86690ceb0ffb7626cb2c2b2633db22891c
First indexed
2024-10-20 17:12:10
Last updated
2026-09-02 12:45:05

Antivirus detections

EngineDetection
ALYacGen:Variant.Zusy.561776
APEXMalicious
AVGWin32:Evo-gen [Trj]
AhnLab-V3Trojan/Win.Generic.C5682285
AlibabaTrojan:Win32/LummaStealer.57ae5313
Antiy-AVLTrojan[Packed]/Win32.Themida
ArcabitTrojan.Zusy.D89270
AvastWin32:Evo-gen [Trj]
AviraTR/Crypt.TPM.Gen
BitDefenderGen:Variant.Zusy.561776
BkavW32.AIDetectMalware
CAT-QuickHealTrojan.Ghanarava.1731957184434793
CTXexe.trojan.themida
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
DrWebTrojan.PWS.Lumma.622
ESET-NOD32a variant of Win32/Packed.Themida.HZB
Elasticmalicious (high confidence)
EmsisoftGen:Variant.Zusy.561776 (B)
F-SecureTrojan.TR/Crypt.TPM.Gen
FireEyeGeneric.mg.704542b9a18bd762
FortinetW32/Themida.HZB!tr
GDataGen:Variant.Zusy.561776
GoogleDetected
GridinsoftTrojan.Heur!.032120A1
IkarusTrojan.Win32.LummaStealer
K7AntiVirusTrojan ( 00585f781 )
K7GWTrojan ( 00585f781 )
KasperskyUDS:DangerousObject.Multi.Generic
KingsoftWin32.Trojan.Generic.a
LionicTrojan.Win32.Themida.4!c
MalwarebytesTrojan.MalPack.Themida
MaxSecureTrojan.Malware.7164915.susgen
McAfeeArtemis!704542B9A18B
MicroWorld-eScanGen:Variant.Zusy.561776
MicrosoftTrojan:Win32/LummaStealer.RPE!MTB
Paloaltogeneric.ml
PandaTrj/Chgt.AD
RisingTrojan.Agent!1.106CA (CLASSIC)
SangforSuspicious.Win32.Save.ins
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win32.Generic.vh
SophosMal/Generic-S
SymantecML.Attribute.HighConfidence
TencentWin32.Trojan.Generic.Bujl
Trapminemalicious.high.ml.score
TrendMicro-HouseCallTrojan.Win32.VSX.PE04C9V
VBA32TScope.Malware-Cryptor.SB
VIPREGen:Variant.Zusy.561776
VaristW32/Agent.JPN.gen!Eldorado
VirITTrojan.Win32.Genus.WTE
XcitiumMalware@#3g5xcuf3an94t
ZillyaTrojan.Themida.Win32.118271
ZonerProbably Heur.ExeHeaderL
alibabacloudTrojan:Win/LummaStealer.RXM2XJC
CTXexe.unknown.zusy
CrowdStrikewin/malicious_confidence_100% (D)
KasperskyHEUR:Trojan.Win32.Generic
McAfeeDReal Protect-LS!704542B9A18B
MicrosoftProgram:Win32/Wacapew.C!ml
SophosGeneric ML PUA (PUA)
ZoneAlarmVHO:Trojan-Spy.Win32.Agent.gen

Network contacts

3.250.92.156 23.48.8.218

DNS requests

bathdoomgaz.store clearancek.site dissapoiznw.store eaglepawnoy.store licendfilteo.site mobbipenju.store spirittunek.store steamcommunity.com studennotediw.store

Process list

NameCommand line
file.exe
WerFault.exe-u -p 6412 -s 756
WerFault.exe-u -p 6412 -s 756
WerFault.exe-pss -s 452 -p 6412 -ip 6412