NetDefend IPS
IPS Advisories
NetDefend
Anti-Virus
Anti-Virus Advisories
NetDefend Web Content Filtering
NetDefend IP Reputation
NetDefend Update Center
IPS History
Mar 20, 2025
Mar 13, 2025
Mar 06, 2025
Feb 27, 2025
Feb 20, 2025
Anti-Virus History
Feb 12, 2022
Jan 06, 2022
Oct 23, 2021
Aug 29, 2021
Aug 23, 2021
Home > NetDefend Live > NetDefend IPS Service
NetDefend IPS Service
Print
Advisory ID
48874
Name
MALWARE.SMARTLOADER.INSTALLS.LUMMASTEALER.INFECTION.K
IPS Signature
Advanced IPS Signature
IPS Group
IPS / MALWARE / GENERAL
Issued
Nov 21, 2024
Description
The infection chain begins with a zip archive hosted on a private GitHub account named "user-attachments," containing four essential files: compiler.exe, conf.txt, Launcher.bat, and lua51.dll. When Launcher.bat is executed, it runs compiler.exe with conf.txt, initiating the infection process. This leads to the deployment of SmartLoader, which subsequently installs the Lumma Stealer. Each zip archive contains files with consistent names but differing hashes and sizes.
Enter your details in the box below to receive an email each time we post a new issue of our newsletter.





Click here to unsubscribe


Mar 29, 2025