Extracted

• • Target

    6c5cff00451680070af8daca0a59ee6a6f467f6b3152f60de6cec6cdcb9cf601

  • Size

    2.0MB

  • MD5

    433dbed8a7afbf15bfee967c63a50769

  • SHA1

    858e1279c2f6a47051eb963012099d11d60a881d

  • SHA256

    6c5cff00451680070af8daca0a59ee6a6f467f6b3152f60de6cec6cdcb9cf601

  • SHA512

    06c6af80a5ccc79bcabc64c217289eb3aeaca0fddbe9f1bd60de9927690a77dfd850edcfe0a1f2523e10f0074ae8bcb61076a9feb38d0113d38aff0121a36c4e

  • SSDEEP

    12288:8+GMPjZBXBlm7PRfbjn9pmhpeXN9wqdOlt:VP7QPRz/mhpK4

  Score

  10^/10

  lummaspywarestealer

  • Lumma Stealer

    An infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2