Extracted

• • Target

    0a30fd185ba2df7de7ed36015dc989e57c97e7aa62477a06f88ad0a2b8676b91

  • Size

    6.1MB

  • MD5

    f51c1bbce5bd1703e273686a6aa9e9ef

  • SHA1

    dbca80ec6e207ee1b3be4a4d105540aadfb56eec

  • SHA256

    0a30fd185ba2df7de7ed36015dc989e57c97e7aa62477a06f88ad0a2b8676b91

  • SHA512

    f4ca8502b4e617efcd8af2ba6f84b1b716a90cb879a6eaecfd8140b23550cfeca46f08c959e854c8d6b4de1940d2b4b698d5d5c4a8c9f582115f177d8bae55c1

  • SSDEEP

    98304:YcPjK+TNuXBBY7uW242na8cF+lmS+qQmo+LkV/Mu/1gL8:eBY7ui2rcFW+Aq9gI

  Score

  10^/10

  lummastealervmprotect

  • Lumma Stealer

    An infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • VMProtect packed file

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  behavioral1behavioral2