Extracted

• • Target

    2024-04-26_0302f17317ac9872d688400bb2bbfd25_magniber

  • Size

    13.2MB

  • MD5

    0302f17317ac9872d688400bb2bbfd25

  • SHA1

    97c2d547aee9f7253e4eeb32520c696b6063c7d3

  • SHA256

    14c33aa6a0f7ab361be5f99ccdc9f56f14cde20b6a526d5e26e58c94de107320

  • SHA512

    60d8e0bf675d50aa0bca56c16e5822ddbd3794807556bc7d1d8d85cd41b1d237c5d57577cc19ad3024edc31e926f4321958d3a91a85026546d24ee1ec2fde7d6

  • SSDEEP

    196608:HYAgzUvfvzUGZkof8M3hBiIEo0LMkxa3VFVUPsy:znvzfvf8MviIEooMsa3WJ

  Score

  10^/10

  lummapersistencestealer

  • Lumma Stealer

    An infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Adds Run key to start application

    persistence

  • Suspicious use of NtCreateThreadExHideFromDebugger

  behavioral1behavioral2