Malicious
PE Executable
MD5: 3837b2ae95f88ec677f83fa95ac50a79
Size: 466.94 KB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
This sample is a 456 KB PE Executable identified by Malva.RE as Lumma Stealer (stealer). It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 30a8365303ef8233d566a4a55f5d8f21cb5020444045537a489b89a0013cecb9
- MD5
- 3837b2ae95f88ec677f83fa95ac50a79
- Verdict
- Malicious
- File type
- PE Executable · 456 KB
- Family
- Lumma Stealer
- Category
- Stealer
Cite this report: https://app.malva.re/sha256/30a8365303ef8233d566a4a55f5d8f21cb5020444045537a489b89a0013cecb9
Related Lumma Stealer samples
- 4d5fd4d96346fb4b09dccb7836ca2dedd339622a6e6063b4dbec1af83cca94f5 2026-04-24
- fbd439ccc92eb7001421e0cd50efaffa599cc4d3856e65799e51ed64a93bdf1f 2026-04-07
- 65cf85118c69198cdd7c9f6b7bdb58bb8f1ed9cc09834dd687c0e70bf53c8723 2026-04-04
- c03ca9e42802851951cac696aa7ac0ae80fa07e4b188c2e26ca73845f6542200 2026-04-04
- fe0184cd17b02eb0fb6b1fd83e9ff5bbd7ce34c455abe93c4f5b78e6df1553c8 2026-04-02
- 8ef463592cbf5e37d83f9bdfa74feee4ba1722e6ef5a417c6976758b6c991747 2026-04-02
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
466.94 KB · 466,944 B
First seen
2026-11-04 04:30 · an hour ago
Last seen
2026-11-04 04:30 · an hour ago
Last analysis
2026-11-04 04:30 · an hour ago
Hashes
MD5
3837b2ae95f88ec677f83fa95ac50a79
Sha1
1158d28851adc223b7cc93fcc9585381fe53be34
Sha256
30a8365303ef8233d566a4a55f5d8f21cb5020444045537a489b89a0013cecb9
Sha384
b66d4118d24064809d627b66f7fb34371f3b127c797b84f3230fe1bedcd9d03b108ce915af6da46a8de4217d32be5e18
Sha512
a4e287900b0fa0f70d454029f9e136bb6d40eaae90dcb956fb9bdd053bcd80992b4a112270b909d2a3e377600a46f4557150253d82f88c0115d7017488a8020f
SSDeep
6144:v82NJSrLFWylL8IuJD0Xo+Ewn+V7xeZosuApS5FNQOgqjMhlJMAxl1hL8XHIOO0:vzSrRWyZSVt/sZS5EOgq4hlJMAgu0
TLSH
34A4AF21B9D1C0F1D823157105F9EB7A9A787A31CA718DCBFBD40D78EA362C0936925E
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
1 malicious · 1 file
EXE3837b2ae95f88ec677f83fa95ac50a79Lumma Stealer
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
malicious
1 nodes
| Name | Value |
|---|---|
| Info | PDB Path: C:\Users\Test\Desktop\LC2\LC2_servConf\Release\LC2.pdb |
LummaEncrypted@000676A8 [0123456789]
UNKNWOWNmalicious
?huhuhuhu
LummaEncrypted@0006E250 [2ebad44063a5f6ed2c1deb0aa5fe32ec]
UNKNWOWNmalicious
M "?huhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential