9d7af339b485bffd1e2602893f59493c0138e3fd1468b979fab392a9d49d864d
Classification: Malicious
9d7af339b485bffd1e2602893f59493c0138e3fd1468b979fab392a9d49d864d is a malicious file sample. Linked to Lumma Stealer malware.
Detection summary
- 0 antivirus detections
- 1 IDS alerts
- 17 processes observed
- 7 contacted hosts
- 1 DNS requests
MITRE ATT&CK associations
Malware families: LUMMA STEALER (S1213)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Lumma Stealer | ThreatFox Abuse.ch | 2025-04-03 04:49:51 | 2025-04-05 05:05:25 | S1213 Lumma Stealer | |
| Generic Malware | Hybrid-Analysis | 2024-10-25 15:15:12 | 2024-10-25 15:30:23 |
Tags
botnet evasive infostealer kelihos win.lumma lummac2 stealerSample information
- Filenames
- 9d7af339b485bffd1e2602893f59493c0138e3fd1468b979fab392a9d49d864d
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows
- Size
- 1894400 bytes
- MD5
fddff92ff654038020f1d94c29a51931- SHA-1
7b2c9910979ef129b073609a58db2c4f5d0981e0- SHA-256
9d7af339b485bffd1e2602893f59493c0138e3fd1468b979fab392a9d49d864d- First indexed
- 2024-10-25 14:47:43
- Last updated
- 2026-09-02 15:31:12
Network contacts
185.215.113.16 185.215.113.26 185.215.113.17 34.116.235.241 185.215.113.117 185.215.113.37 65.21.18.51
DNS requests
Process list
| Name | Command line |
|---|---|
| 9d7af339b485bffd1e2602893f59493c0138e3fd1468b979fab392a9d49d864d.exe | |
| axplong.exe | |
| stealc_default2.exe | |
| processclass.exe | |
| zxcv.exe | |
| zxcv.exe | |
| 2xJEyjCPKV.exe | |
| SWZena3mcD.exe | |
| splwow64.exe | |
| golden.exe | |
| golden.exe | |
| Newofff.exe | |
| myrdx.exe | |
| MSBuild.exe | |
| Set-up-1.exe | |
| 84ebfd6f4d.exe | |
| 806bf0b32f.exe | |