Malicious
PE Executable
MD5: 714236154e28b396690d1a54953a7f1b
Size: 709.12 KB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
709.12 KB · 709,120 B
First seen
2026-01-08 03:00 · 9 months ago
Last seen
2026-01-08 03:00 · 9 months ago
Last analysis
2026-01-08 03:00 · 9 months ago
Hashes
MD5
714236154e28b396690d1a54953a7f1b
Sha1
5626129c2040879e4f9625faa33fbde4e63c1dfc
Sha256
9494eb0a236203cb89c93219916f7798e07ba43f4bcd75e8ca7e3341b1e7c7d3
Sha384
ad4b905b4c14bf9e952fb487d2e2f4edfec892245cfe2ddb3dfc3aecb346ab073d799805542e0b6b85bfd895c8b806bf
Sha512
daac98f993b25793a02c462bb79fd76ccf367eddffd264f96a558cade1bf159054b55da19e851fe5947956c9c4f4b526ff60a3113734a28637bc05dc4f83e494
SSDeep
12288:EWCXhe4mhLKlRUQGJNTXar3lSn65gQLtk:EW2mhOoQUTXars65gQR
TLSH
45E49E22F99311FDF4B31034989DF33ADB3A3A158E159F8BD7C09B74E9702416A2661B
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLSafeguard 1.03 -> SimonzhUPolyX 0.3 -> delikonVC8 -> Microsoft Corporation
1 malicious · 1 file
EXE714236154e28b396690d1a54953a7f1bLumma Stealer
Structure
LummaEncrypted@00083B94 [0123456789abcdef]
UNKNWOWNmalicious
?huhuhuhu
LummaEncrypted@00084140 [0123456789]
UNKNWOWNmalicious
?huhuhuhu
LummaEncrypted@00087C10 [3333333333333333]
UNKNWOWNmalicious
LummaEncrypted@00088E88 [00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899]
UNKNWOWNmalicious
huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential