84d6ce4060bc19ccc066187a9b366791cc906a71682f21129932135063768f25

Classification: Malicious

84d6ce4060bc19ccc066187a9b366791cc906a71682f21129932135063768f25 is a malicious file sample. Reported by 4 threat sources, last seen 2026-09-02.

Detection summary

  • 37 antivirus detections
  • 18 IDS alerts
  • 0 processes observed
  • 7 contacted hosts
  • 10 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-09-02 21:45:04 2026-09-02 21:45:04 malicious-activity
Generic Malware Cyber Threat Alliance 2025-04-17 10:08:56 2025-04-17 10:08:56
Lumma Stealer ThreatFox Abuse.ch 2025-04-02 16:34:33 2025-04-04 17:29:05
Generic.Malware MalwareBazaar Abuse.ch 2024-12-03 03:11:50 2024-12-03 03:11:50 malicious-activity

Tags

win.lumma lummac2 stealer evasive malicious

Sample information

Filenames
84d6ce4060bc19ccc066187a9b366791cc906a71682f21129932135063768f25, file
File type
application/x-dosexec
MD5
a18873ce53841aa78d28758236963b8c
SHA-1
266f13364198703274e7f80619453a2f1035ca7f
SHA-256
84d6ce4060bc19ccc066187a9b366791cc906a71682f21129932135063768f25
First indexed
2024-12-03 04:18:43
Last updated
2026-09-02 21:45:04

Antivirus detections

EngineDetection
ALYacGen:Variant.Symmi.83490
APEXMalicious
AVGFileRepMalware [Trj]
AhnLab-V3Trojan/Win.Generic.R683293
ArcabitTrojan.Symmi.D14622
AvastFileRepMalware [Trj]
AviraTR/Crypt.XPACK.Gen
BitDefenderGen:Variant.Symmi.83490
BkavW32.AIDetectMalware
CTXexe.unknown.symmi
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
CynetMalicious (score: 99)
DeepInstinctMALICIOUS
ESET-NOD32a variant of Win32/Packed.Themida.HZB
Elasticmalicious (high confidence)
EmsisoftGen:Variant.Symmi.83490 (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen
FireEyeGeneric.mg.a18873ce53841aa7
GDataGen:Variant.Symmi.83490
GridinsoftTrojan.Heur!.038120A1
KasperskyVHO:Trojan-PSW.Win32.Stealerc.gen
Kingsoftmalware.kb.b.999
McAfeeArtemis!A18873CE5384
McAfeeDReal Protect-LS!A18873CE5384
MicroWorld-eScanGen:Variant.Symmi.83490
MicrosoftTrojan:Win32/LummaStealer.RPK!MTB
SangforSuspicious.Win32.Save.a
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win32.Generic.tc
SophosGeneric ML PUA (PUA)
SymantecML.Attribute.HighConfidence
TencentWin32.Trojan-Dropper.Generic.Iajl
Trapminemalicious.high.ml.score
VIPREGen:Variant.Symmi.83490
ZonerProbably Heur.ExeHeaderL
tehtrisGeneric.Malware

Network contacts

52.16.171.153 52.27.79.221 34.229.166.50 44.244.22.128 3.238.30.69 50.16.27.236 173.223.0.227

DNS requests

atten-supporse.biz covery-mover.biz dare-curbys.biz dwell-exclaim.biz formy-spill.biz impend-differ.biz print-vexer.biz se-blurry.biz steamcommunity.com zinc-sneark.biz