<< Back to Top Threats
K7 Detection Name Affected OS Prevalence AV Definition Version
Spyware ( 005b69541 ) Windows Low 12.240.55950
MD5

42ef6c019cd2d4ffb52cd95a8d4c25b3

SHA256

57af9128a0348f7904b390e1d303f0bbf172e2424a63d2233220c1c6e2a3b560

File Size

7,188,480 bytes

Packer Information

N/A

First Seen

03-06-2025

Last Seen

04-06-2025

Aliases

Win32/Spy.LummaStealer.B

Behavior Details

1. Dropped files:
77EC63BDA74BD0D0E0426DC8F8008506
Under the folder
C:\Users\\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content

2. Dropped files:
CabBC9F.tmp
TarBCA0.tmp
Under the folder
C:\Users\\AppData\Local\Temp

3. Dropped files:
SQMHelper
Under the folder
\Device\Afd

Removal Instructions

1. Update the copy of K7 security to the latest version.
2. Scan the system completely and remove the detected files.
3. Restart the machine.