813159a778ae9c4c5f66cf60ac3b30fc30f6bbf574279c546751a012f906ab40

Classification: Malicious

813159a778ae9c4c5f66cf60ac3b30fc30f6bbf574279c546751a012f906ab40 is a malicious file sample. Linked to Lumma Stealer malware.

Detection summary

  • 0 antivirus detections
  • 3 IDS alerts
  • 0 processes observed
  • 2 contacted hosts
  • 10 DNS requests

MITRE ATT&CK associations

Malware families: LUMMA STEALER (S1213)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-09-02 16:45:04 2026-09-02 16:45:04 malicious-activity
Lumma Stealer ThreatFox Abuse.ch 2025-04-02 16:34:16 2025-04-04 17:30:47 S1213 Lumma Stealer
Vidar MalwareBazaar Abuse.ch 2024-10-07 04:43:56 2024-10-07 04:43:56 malicious-activity

Tags

win.lumma lummac2 stealer malicious

Sample information

Filenames
813159a778ae9c4c5f66cf60ac3b30fc30f6bbf574279c546751a012f906ab40, Setup.exe
File type
application/x-dosexec
MD5
5f965231ae39bc8e6a816c8ce8e69d95
SHA-1
2863fc86614ebeabc319377ab9829d5d72091cd5
SHA-256
813159a778ae9c4c5f66cf60ac3b30fc30f6bbf574279c546751a012f906ab40
First indexed
2024-10-07 05:18:25
Last updated
2026-09-02 16:45:04

Network contacts

3.250.92.156 23.45.72.224

DNS requests

bathdoomgaz.store clearancek.site dissapoiznw.store eaglepawnoy.store licendfilteo.site methodbojjewkl.shop mobbipenju.store spirittunek.store steamcommunity.com studennotediw.store