Extracted

• • Target

    788a22b97ca95c43c8d8e54c1aaec37a71facd2ea5c2f559b59c4491206b59c7

  • Size

    1.0MB

  • MD5

    d83d0466e520b764a808d366f8fb8891

  • SHA1

    a60862513d3b48251681d3a7c0d586418463d9b7

  • SHA256

    788a22b97ca95c43c8d8e54c1aaec37a71facd2ea5c2f559b59c4491206b59c7

  • SHA512

    4bad480363914275d86e049130ae0737dc13a2c4cf234d055ca5a4ba81201f3b7c427c72a1fb80a01caf34068e3b8dafbcfdfeee69d9cf38206dac78c616a29f

  • SSDEEP

    24576:1MwqzRJ1bQrwLeP5aAP1n7T7htBn64EWgYakmfVtjzvEEXCE:1MwyH1bQrwLeP4APlVbSWmk+tjzHyE

  Score

  10^/10

  executionlummastealer

  • Lumma Stealer

    An infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2