popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

lum.exe

Generic Malware Malicious Library UPX PE File OS Processor Check PE32
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Nov. 11, 2024, 10:03 a.m. Nov. 11, 2024, 10:05 a.m.
Size 459.0KB
Type PE32 executable (console) Intel 80386, for MS Windows
MD5 1d97c138b9e3c19f4900a6a348240430
SHA256 77f6caa506303dbdcf644380adf5cb01b122f6f5efa3a54d7492754075243e2b
CRC32 D0AA1E83
ssdeep 6144:/gP8GiHvQTV+d/qi25eKfU2cDQG+TJFy7M6NLUwbfe1g/NeG0qTIBU9g7B:m8KodE5ZcPhmLyo6Nnf/NeGwBmg7B
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
  • Generic_Malware_Zero - Generic Malware
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

section .10cfg
section {u'size_of_data': u'0x0001de00', u'virtual_address': u'0x00001000', u'entropy': 7.0501355311619776, u'name': u'.text', u'virtual_size': u'0x0001dc9c'} entropy 7.05013553116 description A section with a high entropy has been found
section {u'size_of_data': u'0x0004c200', u'virtual_address': u'0x0002a000', u'entropy': 7.99942566627063, u'name': u'.pdata', u'virtual_size': u'0x0004b200'} entropy 7.99942566627 description A section with a high entropy has been found
entropy 0.926775956284 description Overall entropy of this PE file is high
Bkav W32.Common.B580E29F
Lionic Trojan.Win32.Lumma.1u!c
Cynet Malicious (score: 100)
Skyhigh BehavesLike.Win32.Generic.gc
ALYac Trojan.GenericKD.74676048
Cylance Unsafe
VIPRE Trojan.GenericKD.74676048
CrowdStrike win/malicious_confidence_100% (W)
BitDefender Trojan.GenericKD.74676048
Arcabit Trojan.Generic.D4737750
VirIT Trojan.Win32.Genus.WXO
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win32/GenKryptik.HDMH
APEX Malicious
Avast Win32:Evo-gen [Trj]
ClamAV Win.Packed.Fugrafa-10037096-0
Kaspersky HEUR:Trojan.Win32.Stelpak.gen
Alibaba Trojan:Win32/Stelpak.0bc5832c
MicroWorld-eScan Trojan.GenericKD.74676048
Rising Trojan.Stelpak!8.1B214 (TFE:5:kcmEtnJh2FU)
Emsisoft Trojan.GenericKD.74676048 (B)
F-Secure Trojan.TR/AVI.Lumma.pmxfd
DrWeb Trojan.PWS.Lumma.801
McAfeeD ti!77F6CAA50630
Trapmine suspicious.low.ml.score
CTX exe.trojan.lumma
Sophos Mal/Generic-S
SentinelOne Static AI - Malicious PE
FireEye Generic.mg.1d97c138b9e3c19f
Google Detected
Avira TR/AVI.Lumma.pmxfd
Antiy-AVL Trojan/Win32.Stelpak
Kingsoft malware.kb.a.926
Gridinsoft Ransom.Win32.Wacatac.sa
Xcitium Malware@#5ki103d0fl3o
Microsoft Trojan:Win32/Wacatac.A!ml
ZoneAlarm UDS:DangerousObject.Multi.Generic
GData Trojan.GenericKD.74676048
Varist W32/Trojan.NNPM-2372
AhnLab-V3 Trojan/Win.Generic.R675910
McAfee Artemis!1D97C138B9E3
DeepInstinct MALICIOUS
Malwarebytes Spyware.Lumma
Ikarus Trojan.Win32.Krypt
Panda Trj/Chgt.AD
Tencent Trojan.Win32.Kryptik.16001480
Yandex Trojan.Stelpak!DZGE5n2gFzc
MaxSecure Trojan.Malware.272815677.susgen
Fortinet PossibleThreat.FORTIEDR.H