85956f8904660bc4f6e1c1912ba482231f438e5b52bcf12dc00dba2400c6aad3
Classification: Malicious
85956f8904660bc4f6e1c1912ba482231f438e5b52bcf12dc00dba2400c6aad3 is a malicious file sample. Reported by 3 threat sources, last seen 2026-09-02.
Detection summary
- 0 antivirus detections
- 0 IDS alerts
- 2 processes observed
- 9 contacted hosts
- 10 DNS requests
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2024-08-20 04:30:06 | 2026-09-02 23:45:09 | malicious-activity | |
| Lumma Stealer | ThreatFox Abuse.ch | 2025-04-02 16:34:38 | 2025-04-04 17:28:36 | ||
| Generic.Malware | MalwareBazaar Abuse.ch | 2024-08-19 16:51:59 | 2024-08-19 16:51:59 | malicious-activity |
Tags
malicious win.lumma lummac2 stealerSample information
- Filenames
- 85956f8904660bc4f6e1c1912ba482231f438e5b52bcf12dc00dba2400c6aad3, 85956. Trojan.exe, FusionLoader v2.1.exe
- File type
- application/x-dosexec
- Size
- 274432 bytes
- MD5
5322f852ebca7860b15c085d7c95a88f- SHA-1
83b9904fb802b523195026cecb402710e3622111- SHA-256
85956f8904660bc4f6e1c1912ba482231f438e5b52bcf12dc00dba2400c6aad3- First indexed
- 2024-08-19 17:22:15
- Last updated
- 2026-09-02 23:45:09
Network contacts
172.67.200.14 172.67.148.102 172.67.161.217 172.67.186.145 172.67.218.99 104.21.69.161 104.21.17.213 104.21.15.74 104.21.39.10
DNS requests
cagedwifedsozm.shop charecteristicdxp.shop consciousourwi.shop deicedosmzj.shop interactiedovspm.shop potentioallykeos.shop southedhiscuso.shop torubleeodsmzo.shop weiggheticulop.shop tenntysjuxmz.shop
Process list
| Name | Command line |
|---|---|
| 85956.Trojan.exe | |
| RegAsm.exe | |