8456cc2d2a31cb075f95053c8eb886a47ba8381a2ba2fbe0866120fb24ff41bd

Classification: Malicious

8456cc2d2a31cb075f95053c8eb886a47ba8381a2ba2fbe0866120fb24ff41bd is a malicious file sample. Linked to Lumma Stealer malware.

Detection summary

  • 46 antivirus detections
  • 0 IDS alerts
  • 5 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: LUMMA STEALER (S1213)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2024-10-20 03:41:48 2026-09-02 21:45:08 malicious-activity
Lumma Stealer ThreatFox Abuse.ch 2025-04-02 16:34:30 2025-04-04 17:29:19 S1213 Lumma Stealer
LummaStealer MalwareBazaar Abuse.ch 2024-10-20 03:31:48 2024-10-20 03:31:48 malicious-activity S1213 Lumma Stealer

Tags

win.lumma lummac2 stealer

Sample information

Filenames
8456cc2d2a31cb075f95053c8eb886a47ba8381a2ba2fbe0866120fb24ff41bd, 24d3508e6e8ab231674ba72825fa7dd2.exe
File type
PE32 executable (GUI) Intel 80386, for MS Windows
Size
491048 bytes
MD5
24d3508e6e8ab231674ba72825fa7dd2
SHA-1
6d966063bd7111e223a360ac02c6c6822e6ed128
SHA-256
8456cc2d2a31cb075f95053c8eb886a47ba8381a2ba2fbe0866120fb24ff41bd
First indexed
2024-10-20 03:33:29
Last updated
2026-09-02 21:45:08

Antivirus detections

EngineDetection
ALYacGen:Variant.Lazy.614972
APEXMalicious
AVGWin32:MalwareX-gen [Trj]
AhnLab-V3Trojan/Win.Generic.C5684467
AlibabaTrojan:Win32/Stelpak.9cab1b06
Antiy-AVLTrojan[Banker]/Win32.Bandra
ArcabitTrojan.Generic.D232CC13
AvastWin32:MalwareX-gen [Trj]
AviraHEUR/AGEN.1305290
BitDefenderTrojan.Generic.36883475
BkavW32.AIDetectMalware
CTXexe.trojan.generic
CrowdStrikewin/malicious_confidence_100% (D)
CylanceUnsafe
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
DrWebTrojan.PWS.Lumma.707
ESET-NOD32a variant of Win32/GenKryptik.HCXB
Elasticmalicious (high confidence)
EmsisoftTrojan.Generic.36883475 (B)
F-SecureHeuristic.HEUR/AGEN.1305290
FireEyeGeneric.mg.24d3508e6e8ab231
FortinetW32/GenKryptik.HCWH!tr
GDataWin32.Trojan.Agent.9BRK2B
GoogleDetected
GridinsoftTrojan.Heur!.00012031
IkarusTrojan.Win32.Krypt
KasperskyHEUR:Trojan.Win32.Stelpak.gen
KingsoftWin32.Trojan.Stelpak.gen
LionicTrojan.Win32.Stelpak.4!c
MalwarebytesMalware.AI.4294149967
McAfeeArtemis!24D3508E6E8A
McAfeeDti!8456CC2D2A31
MicroWorld-eScanTrojan.Generic.36883475
MicrosoftTrojan:Win32/Sabsik.FL.A!ml
Paloaltogeneric.ml
RisingBackdoor.Agent!8.C5D (TFE:5:Wb0309nlnN)
SangforTrojan.Win32.Agent.V13j
SentinelOneStatic AI - Malicious PE
SkyhighArtemis!Trojan
SophosMal/Generic-S
SymantecML.Attribute.HighConfidence
TencentWin32.Trojan.FalseSign.Iajl
Trapminemalicious.high.ml.score
VaristW32/Kryptik.MVX.gen!Eldorado
alibabacloudTrojan:Win/Wacatac.B9nj

Process list

NameCommand line
24d3508e6e8ab231674ba72825fa7dd2.exe
24d3508e6e8ab231674ba72825fa7dd2.exe
WerFault.exe-u -p 4536 -s 400
WerFault.exe-u -p 4536 -s 400
WerFault.exe-pss -s 440 -p 4536 -ip 4536