Lumma Stealer malware

Lumma Stealer (LummaC2) is a malware-as-a-service information stealer targeting browser data, crypto wallets and 2FA extensions, usually delivered through fake installers, cracked software and loaders.

Malva.RE has analysed 89 public samples tagged Lumma Stealer, statically and without execution. The latest public sample was seen on 2026-04-24.

File types

  • PE Executable39
  • ZIP Archive1

Latest public Lumma Stealer samples

Sample Type First seen
4d5fd4d96346fb4b09dccb7836ca2dedd339622a6e6063b4dbec1af83cca94f5 PE Executable 2026-04-24
fbd439ccc92eb7001421e0cd50efaffa599cc4d3856e65799e51ed64a93bdf1f PE Executable 2026-04-07
65cf85118c69198cdd7c9f6b7bdb58bb8f1ed9cc09834dd687c0e70bf53c8723 PE Executable 2026-04-04
c03ca9e42802851951cac696aa7ac0ae80fa07e4b188c2e26ca73845f6542200 PE Executable 2026-04-04
fe0184cd17b02eb0fb6b1fd83e9ff5bbd7ce34c455abe93c4f5b78e6df1553c8 PE Executable 2026-04-02
8ef463592cbf5e37d83f9bdfa74feee4ba1722e6ef5a417c6976758b6c991747 PE Executable 2026-04-02
8bde0f38b2eafbdbe2c33f4f7352029b2890e345cdcda3cc171e1e1246535814 PE Executable 2026-04-02
26541cd26b08929911eaf9d3d09d2bdf06ae314b3c76bd02d2a75248033c875f PE Executable 2026-04-02
beca148fe90dcb06dc2aedfffc5b7098453b1489f1cc6e69febb520e2e253ce4 PE Executable 2026-04-02
bd52309c600df9be82a2e8afd09bfd19ba20a303ecc05a85e550afd426906283 PE Executable 2026-04-02
f2731f3e8c386a76fdf1663c0cb0d4565768ba57aa453b243936da8195b489c9 PE Executable 2026-03-27
69e1c6e6db92779a952338294a7c75782c9ad2c48b57289252e3f5287d1c5bd5 PE Executable 2026-03-15
54eee378bc2e454bbf174cf3b93d7697964d0ea688d6e2441697b6cd3a2871af PE Executable 2026-03-08
02045e58aba74d3619e3bb428f033ca51fb21735d36cf8f62cb7e08a21c7e4bc PE Executable 2026-03-05
c209ed91a5c4c829076eab89dc534ca1b9810258bd260779eef37e92158b497b PE Executable 2026-02-20
701f5f9fe2a386456622ae19164990084df41e789c826e45fb56a2f5a4596036 PE Executable 2026-02-17
8a9d2ac903092ecbf334fa3f5ec65af8a94106825c3bfa0df87ff89212f2b240 PE Executable 2026-01-08
29ad51c0b28e248d5b4252e8b0ed08c57def0de8f5502344be9600767190f412 PE Executable 2026-01-08
66a30ad252dc3bc445c71d2426ca876eed62a44b67d8b241d4a42b8d2d49f337 PE Executable 2026-01-08
9494eb0a236203cb89c93219916f7798e07ba43f4bcd75e8ca7e3341b1e7c7d3 PE Executable 2026-01-08
0f6f0f85e227dc265fb3e020a7972d864588b3cb58085e1943ccc8907ef3b2df PE Executable 2025-12-08
613bcc83f843d129943420d4ff144ed211ba1c98b0d152cd6bbad9821f3e357b PE Executable 2025-12-04
0f971ac499a0f9a89069c8544c88765ac9f2ffd52aa7e29b15b586c6baecd6d8 PE Executable 2025-11-30
c795c63e16fd180a30d904386dc4b9c3b210d699444a0aa78f4b795e96286fb0 PE Executable 2025-11-23
525a2f6a266dcf0dd08ef95cbbeb062bb3d04ea07ebd0da0edf17b7be4ba95c0 PE Executable 2025-11-23
0ff2942601a42220b5dc6efd49f1cb98f51fd5028e73574eb76ceba501092536 PE Executable 2025-11-23
0bd574d0e076982665e2e0f1de667d8e2c42d5aa00f03ef106eaef5a807b298c PE Executable 2025-11-23
68bfdc8e5485211e4a6b409d266c98f1f18fb2b5ac06c0b2b83fb724a03ab319 PE Executable 2025-11-16
a4dd26ed32c9fc6df421007e6cb8ff8b6ab4ae3cacae434d051aa0cd50436947 PE Executable 2025-11-13
a9c47f10d5eb77d7d6b356be00b4814a7c1e5bb75739b464beb6ea03fc36cc85 PE Executable 2025-09-12
e683db1a30ff19c51aaea8092ce62d1a8c33fab79ba12e90ac9a56475dcda3f2 PE Executable 2025-09-12
fd3875225c1ab60e6dc52fc8f94b4d389624592b7e7b57ee86e54cebe5d3eb6a PE Executable 2025-09-12
874db4ca5db163b737878830554592cdcf8b4deff6a8861b863e036507f66940 PE Executable 2025-09-12
e91f79999728911847313f70ec1ac76ff5965b43c929bc4db7c2f55d62f353d2 PE Executable 2025-09-12
01e67139b59eed0fe1fcb4c66a9e88ad20dd8b55648c077aec7fa2ae3431ea5f PE Executable 2025-07-26
cc8feb00704f3a2165ba459477ecd5a21aaf34a3a675a2d542c98c093d971b4d PE Executable 2025-06-28
1c074e6cca22af63fdeb3e770be60c7410250cc02dfe4cbc508484c88fab1559 PE Executable 2025-06-27
a6ab75809a8758888819640855987bcbe30ce439b1b0d611297aed6b8fc94955 PE Executable 2025-06-27
d53b5fb0367af5097c55138eb525ad7a693a38bd2979f19efe3b98a660d2cfaf PE Executable 2025-06-27
97527a65d3e6cbd511716c46e4c54e4e6416ef189ca3fc531f515ba8c3878b39 ZIP Archive 2025-06-27

Analyse your own Lumma Stealer sample

Malva.RE unpacks, decompiles and extracts the configuration of suspicious files statically — the file is never executed. Free-plan reports are public.

Analyse a file for free
An error has occurred. This application may no longer respond until reloaded. Reload 🗙