Extracted

• • Target

    7c4580a23caaebf1a6bf1789f1ef4fad53b72fa736a7b11eb3cb70a089d34486.exe

  • Size

    1.1MB

  • MD5

    5573f9d646c2ff5c4cd5ee82a5b01e92

  • SHA1

    6c828b45f929b6747a42470abbdcf307a56953f0

  • SHA256

    7c4580a23caaebf1a6bf1789f1ef4fad53b72fa736a7b11eb3cb70a089d34486

  • SHA512

    9260bca4a6d1010c13d01dadafbe33de3847fee4c03f05f23a9b117df5e3447ddfc2307a506947e7d15238f2a640d71c1c84e167d9a1d7da19558ee774d23d18

  • SSDEEP

    24576:KMw5NGpwZ7/fEUd4zQwR3xCw1cisoZlVtDCapAQ:KMw5gicTcwF1zZlH9P

  Score

  10^/10

  lummastealer

  • Lumma Stealer

    An infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2