Pulse Detail — Threat Intelligence

PULSE NAME

IOC - Unmasking The 64-bit Variant of the Infamous Lumma Stealer

WHITE Lumma Stealer celestre 2026-04-09 Modified: 2026-04-09

IOCs

HIGH VOLUME

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

T1055 T1027 T1082 T1055.002 T1005 T1497.001 T1573 T1102 T1106 T1134.001 T1555.003 T1555 T1539 T1027.002 T1071.001 T1497 T1185 T1140 T1564.003

MALWARE FAMILIES

Tenzor Lumma Stealer Remus Rhadamanthys AuraStealer VoidStealer

Indicators of Compromise (19 / 89 total)

All FileHash-SHA1 FileHash-SHA256 IPv4 URL domain

TYPE	INDICATOR	DESCRIPTION	CREATED
FileHash-SHA256	002f714f93bed53f165129a820c2d5b72227f1cafac43be19e5e223ce219a5e1	—	2026-04-09
FileHash-SHA256	0580ebf601989457f0708799b431fd4d9f5e59d98838282d72936099aa6636da	—	2026-04-09
FileHash-SHA256	066c4ab954fc1270ee62c0d7c582c4c691e58e0ffef0c654bc204a46e440d16d	—	2026-04-09
FileHash-SHA256	0683f353cf3e101f721f1658e2a554ff7888ff9f2c32e23ceb3d23876864a264	—	2026-04-09
FileHash-SHA256	0a8f734f10400f7ae8fef591147e78dab6350089683be84c1cb6c82113cb1319	—	2026-04-09
FileHash-SHA256	25e74a76f2f3601abcb20fd743a7e3cf3befd5a3838c7501af5d87d293233809	—	2026-04-09
FileHash-SHA256	4428c3ffe2532f162f31d7573bbc1cca2299195421da3d8e8a3e535e9fc42b08	—	2026-04-09
FileHash-SHA256	484e3ab5d425a97819f01dcc330e005dc444c51625bfdcd7ea9a3954018d1fc9	—	2026-04-09
FileHash-SHA256	64db10e76b46be8db36e02993d36559bc3f86606c9ea955731872b716c8f0c69	—	2026-04-09
FileHash-SHA256	788b56e9be2f1dd6a977dce0265f293ab42d3e8ffb287ab584e169fbf115da1f	—	2026-04-09
FileHash-SHA256	8653d7158486aa10fc0078c3ca9318cd7ace05d4b3e6f3b1fb84ffb7a6a339ec	—	2026-04-09
FileHash-SHA256	8b6b238ffa6e411229c6754ba99f7b990c49edfb2c34068ce0ac5564824d71ad	—	2026-04-09
FileHash-SHA256	a4f111e5425690fcd384c62ecb5b57b0f645925572af3541748e01d810cd2b40	—	2026-04-09
FileHash-SHA256	ab2e47720388fa201e242552f8d8b82363c6c52f6c63fa3fec9dce027cb12e77	—	2026-04-09
FileHash-SHA256	b037fa1dd769891b538d9ca26131890c93e3458eec96c5354bdebe50d04a5b3d	—	2026-04-09
FileHash-SHA256	bc11d036fe59abb3915f736307c56d2fd43e8127e46c31f926eeda864f4d66dc	—	2026-04-09
FileHash-SHA256	c3f7cea80dbafaa90a88b28a6dfb1227caaf5c2a29f0ce06bf663d6ed2cfc079	—	2026-04-09
FileHash-SHA256	cab7855ccfca19a06eea76e0e170f592dcc95906ecfa5436f5a11947e04e63d5	—	2026-04-09
FileHash-SHA256	dbf6facd28406361a6a81417b3ff5eb272ccc8dcc58a36bd5335a253ae4bf036	—	2026-04-09

References (1)

↗ https://www.gendigital.com/blog/insights/research/remus-64bit-variant-of-lumma-stealer